Configuring Radius Accounting Servers - H3C S5600 Series Operation Manual

Operation Manual – AAA
H3C S5600 Series Ethernet Switches
Set the IP address and
port number of the
primary RADIUS
authentication/authorizati
on server
Set the IP address and
port number of the
secondary RADIUS
authentication/authorizati
on server
Note:
The authentication response sent from the RADIUS server to the RADIUS client
carries authorization information. Therefore, you need not (and cannot) specify a
separate RADIUS authorization server.
In an actual network environment, you can specify one server as both the primary
and secondary authentication/authorization servers, as well as specifying two
RADIUS servers as the primary and secondary authentication/authorization servers
respectively.
The IP address and port number of the primary authentication server used by the
default RADIUS scheme "system" are 127.0.0.1 and 1645.

2.2.3 Configuring RADIUS Accounting Servers

Follow these steps to configure RADIUS accounting servers:
To do...
Enter system view
Create a RADIUS
scheme and enter its
view
Set the IP address
and port number of
the primary RADIUS
accounting server
To do...
primary authentication
ip-address [ port-number ]
secondary
authentication
ip-address [ port-number ]
Use the command...
system-view
radius scheme
radius-scheme-name
primary accounting
ip-address
[ port-number ]
Use the command...
—
Required
By default, a RADIUS scheme
named "system" has already
been created in the system.
Required
By default, the IP address and
UDP port number of the primary
accounting server are 0.0.0.0 and
1813 for a newly created RADIUS
scheme.
2-14
Chapter 2 AAA Configuration
Remarks
Required
By default, the IP address
and UDP port number of
the primary server are
0.0.0.0 and 1812
respectively for a newly
created RADIUS scheme.
Optional
By default, the IP address
and UDP port number of
the secondary server are
0.0.0.0 and 1812
respectively for a newly
created RADIUS scheme.
Remarks