Huawei Quidway S3900 Series Operation Manual page 508

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Operation
Create a RADIUS
scheme and enter
its view
Set a shared key
for the RADIUS
authentication/aut
horization packets
Set a shared key
for the RADIUS
accounting
packets
Caution:
You must set the share keys separately for the authentication/authorization packets
and the accounting packets if the authentication/authorization server and the
accounting server are different devices and the shared keys on the two servers are also
different.
1.4.5 Configuring the Maximum Number of Transmission Attempts of RADIUS
Requests
The communication in RADIUS is unreliable because this protocol adopts UDP packets
to carry data. Therefore, it is necessary for the switch to retransmit a RADIUS request if
it gets no response from the RADIUS server after the response timeout timer expires. If
the maximum number of transmission attempts is reached and the switch still receives
no answer, the switch considers that the request fails.
Table 1-16 Configure the maximum transmission attempts of RADIUS request
Operation
Enter system view
Create a RADIUS
scheme and enter
its view
Command
radius scheme
radius-scheme-name
key authentication
string
key accounting string
Command
system-view
radius scheme
radius-scheme-name
Huawei Technologies Proprietary
1-27
Chapter 1 AAA & RADIUS & HWTACACS
Description
Required
By default, a RADIUS scheme
named "system" has already
been created in the system.
Required
Required
Description
—
Required
By default, a RADIUS scheme
named "system" has already been
created in the system.
Configuration