Radius Client - H3C S7500E Series Command Manual

Command Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Related commands: key, radius scheme, state.
Examples
# Set the IP address of the primary authentication/authorization server for RADIUS
scheme radius1 to 10.110.1.1 and the UDP port of the server to 1812.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary authentication 10.110.1.1 1812

1.2.9 radius client

Syntax
radius client enable
undo radius client
View
System view
Parameters
None
Description
Use the radius client enable command to enable the listening port of the RADIUS
client.
Use the undo radius client command to disable the listening port of the RADIUS
client.
By default, the listening port is enabled.
Note that when the listening port of the RADIUS client is disabled:
The RADIUS client can either accept authentication, authorization or accounting
requests or process timer messages. However, it fails to transmit and receive
packets to and from the RADIUS server.
The end account packets of online users cannot be sent out and buffered. This
may cause that the RADIUS server still has the user record after a user goes
offline for a period of time.
The authentication, authorization and accounting turn to the local scheme after the
RADIUS request fails if the RADIUS scheme and the local authentication,
authorization and accounting scheme are configured.
The buffered accounting packets cannot be sent out and will be deleted from the
buffer when the configured maximum number of attempts is reached.
Chapter 1 AAA/RADIUS/HWTACACS
1-43
Configuration Commands