Configuring RADIUS
Accounting Servers
n
In an actual network environment, you can specify one server as both the
■
primary and secondary authentication/authorization servers, as well as
specifying two RADIUS servers as the primary and secondary
authentication/authorization servers respectively.
The IP address and port number of the primary authentication server used by
■
the default RADIUS scheme "system" are 127.0.0.1 and 1645.
Table 192 Configure RADIUS accounting servers
Operation
Enter system view
Create a RADIUS scheme and
enter its view
Set the IP address and port
number of the primary
RADIUS accounting server
Set the IP address and port
number of the secondary
RADIUS accounting server
Enable stop-accounting
request buffering
Set the maximum number of
transmission attempts of a
buffered stop-accounting
request.
Set the maximum allowed
number of continuous
real-time accounting failures
In an actual network environment, you can specify one server as both the
■
primary and secondary accounting servers, as well as specifying two RADIUS
servers as the primary and secondary accounting servers respectively. In
addition, because RADIUS adopts different UDP ports to exchange
authentication/authorization messages and accounting messages, you must set
a port number for accounting different from that set for
authentication/authorization.
RADIUS Configuration Task List
Command
system-view
radius scheme
radius-scheme-name
primary accounting
ip-address [ port-number ]
secondary accounting
ip-address [ port-number ]
stop-accounting-buffer
enable
retry stop-accounting
retry-times
retry realtime-accounting
retry-times
255
Remarks
-
Required
By default, a RADIUS scheme
named "system" has already
been created in the system.
Required
By default, the IP address and
UDP port number of the
primary accounting server are
0.0.0.0 and 1813 for a newly
created RADIUS scheme.
Optional
By default, the IP address and
UDP port number of the
secondary accounting server
are 0.0.0.0 and 1813 for a
newly created RADIUS
scheme.
Optional
By default, stop-accounting
request buffering is enabled.
Optional
By default, the system tries at
most 500 times to transmit a
buffered stop-accounting
request.
Optional
By default, the maximum
allowed number of
continuous real-time
accounting failures is five. If
five continuous failures occur,
the switch cuts down the user
connection.
Need help?
Do you have a question about the 4210 PWR and is the answer not in the manual?