H3C S5600 Series Operation Manual page 208

Network diagram
Figure 1-8 Network diagram for configuring port security mode
macAddressElseUserLoginSecureExt
GE1/0/1
Host Switch
Configuration procedure
The following configurations involve some AAA/RADIUS configuration commands. For
details about the commands, refer to AAA Operation.
Configurations on the user host and the RADIUS server are omitted.
Configure RADIUS parameters
# Create a RADIUS scheme named radius1.
<Switch> system-view
[Switch] radius scheme radius1
# Specify the primary RADIUS authentication server and primary RADIUS accounting
server.
[Switch-radius-radius1] primary authentication 192.168.1.3
[Switch-radius-radius1] primary accounting 192.168.1.2
# Specify the secondary RADIUS authentication server and secondary RADIUS accounting
server.
[Switch-radius-radius1] secondary authentication 192.168.1.2
[Switch-radius-radius1] secondary accounting 192.168.1.3
# Set the shared key for message exchange between the switch and the RADIUS
authentication servers to name.
[Switch-radius-radius1] key authentication name
# Set the shared key for message exchange between the switch and the accounting
RADIUS servers to name.
[Switch-radius-radius1] key accounting name
# Set the interval and the number of packet transmission attempts for the switch to send
packets to the RADIUS server.
[Switch-radius-radius1] timer 5
[Switch-radius-radius1] retry 5
Authentication servers
(192.168.1.2/24
192.168.1.3/24)
Internet
1-23