3Com 10014299 manual Configure IP address and port of Radius server, Routerradius server

AAA and RADIUS Configuration Examples 543

Figure 169 Networking diagram of typical AAA and RADIUS configuration

lqz

Router1

lst

RADTUS authentication server 129.7.66.66

RADTUS accounting server

129.7.66.67

Router2

Modem

ISDN\PSTN

Modem
Network to	RADTUS authentication & accounting server
be accessed	129.7.66.68

1Enable AAA and configure default authentication method list of PPP user.

[Router]aaa-enable

[Router]aaa authentication-scheme ppp default radius

2Configure IP address and port of RADIUS server.

[Router]radius server 129.7.66.66

[Router]radius server 129.7.66.67

3Configure RADIUS server shared secret, retransmission times, and accounting option

[Router] radius shared-key this-is-my-secret

[Router] radius retry 2

[Router] aaa accounting-scheme optional

[Router] radius timer response-timeout 5

Accessing User 129.7.66.66 acts as the first authentication and accounting server, port numbers Authentication Case 2 being 1000 and 1001 respectively.

129.7.66.67acts as the second authentication and accounting server, port numbers being 1812 and 1813 respectively.

Authenticate by the local database first, and if there is no response, use the

RADIUS server.

Charge all users in real time. The real-time accounting packet is sent at the interval of 5 minutes.

See Figure 169.

1Enable AAA and configure default authentication method list of PPP user.

[Router] aaa-enable

[Router] aaa authentication-scheme ppp default radius

2Configure local-first authentication

[Router] aaa authentication-scheme local-first