1960 CHAPTER 128: RADIUS CONFIGURATION COMMANDS

Related command: key (RADIUS scheme view), radius scheme, state.

Example # Set the IP address of the primary authentication/authorization server for RADIUS scheme radius1 to 10.110.1.1 and the UDP port of the server to 1812.

<Sysname> system-view

[Sysname] radius scheme radius1

[Sysname-radius-radius1] primary authentication 10.110.1.1 1812

radius client

Syntax radius client enable

undo radius client

View System view

Parameter None

Description Use the radius client enable command to enable the listening port of the RADIUS client.

Use the undo radius client command to disable the listening port of the

RADIUS client.

By default, the listening port is enabled.

Note that when the listening port of the RADIUS client is disabled:

The RADIUS client can either accept authentication, authorization or accounting requests or process timer messages. However, it fails to transmit and receive packets to and from the RADIUS server.

The end account packets of online users cannot be sent out and buffered. This may cause that the RADIUS server still has the user record after a user goes offline for a period of time.

The authentication, authorization and accounting turn to the local scheme after the RADIUS request fails if the RADIUS scheme and the local authentication, authorization and accounting scheme are configured.

The buffered accounting packets cannot be sent out and will be deleted from the buffer when the configured maximum number of attempts is reached.

Example # Enable the listening port of the RADIUS client.

<Sysname> system-view

[Sysname] radius client enable

radius nas-ip

Syntax radius nas-ip ip-address

Page 1960
Image 1960
3Com MSR 30 Radius client, Radius nas-ip, Syntax radius client enable Undo radius client, Syntax radius nas-ip ip-address