1-25
The shared key configured on the device must be the same as that configured on the RADIUS server.
Setting the Upper Limit of RADIUS Request Retransmission Attempts
Because RADIUS uses UDP packets to carry data, the communication process is not reliable. If a NAS
receives no response from the RADIUS server before the response timeout timer expires, it is required
to retransmit the RADIUS request. If the number of transmission attempts exceeds the specified limit
but it still receives no response, it considers that the authentication has failed.
Follow these steps to set the upper limit of RADIUS request retransmission attempts:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create a RADIUS scheme and
enter RADIUS scheme view
radius scheme
radius-scheme-name
Required
Not defined by default
Set the number of
retransmission attempts of
RADIUS packets
retry
retry-times
Optional
3 by default
z
The maximum number of retransmission attempts of RADIUS packets multiplied by the RADIUS
server response timeout period cannot be greater than 75.
z
Refer to the
timer response-timeout
command in the command manual for configuring RADIUS
server response timeout period.
Setting the Supported RADIUS Server Type
Follow these steps to set the supported RADIUS server type:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create a RADIUS scheme and
enter RADIUS scheme view
radius scheme
radius-scheme-name
Required
Not defined by default
Specify the RADIUS server
type supported by the device
server-type
{
extended
|
standard
}
Optional
By default, the supported
RADIUS server type is
standard
.