H3C S7500E Series Command Manual page 949

Command Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Use the undo key command to restore the default.
By default, no shared key is configured.
Note that:
You must ensure that the same shared key is set on the device and the RADIUS
server.
If authentication/authorization and accounting are performed on two servers with
different shared keys, you must set separate shared key for each on the device.
Related commands: display radius scheme.
Examples
# Set the shared key for authentication/authorization packets to hello for RADIUS
scheme radius1.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key authentication hello
# Set the shared key for accounting packets to ok for RADIUS scheme radius1.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key accounting ok
1.2.6 nas-ip
Syntax
nas-ip ip-address
undo nas-ip
View
RADIUS scheme view
Parameters
ip-address: IP address in dotted decimal notation. It must be an address of the device
and cannot be all 0s address, all 1s address, a class D address, a class E address or a
loopback address.
Description
Use the nas-ip command to set the IP address for the device to use as the source
address of the RADIUS packets to be sent to the server.
Use the undo nas-ip command to remove the configuration.
By default, the source IP address of a packet sent to the server is the IP address of the
outbound port.
Chapter 1 AAA/RADIUS/HWTACACS
1-40
Configuration Commands