1-28
z
Some earlier RADIUS servers cannot recognize usernames that contain an ISP domain name. In
this case, the device must remove the domain name before sending a username including a
domain name. You can configure the
user-name-format
without-domain
command on the
device for this purpose.
z
If a RADIUS scheme defines that the username is sent without the ISP domain name, do not
apply the RADIUS scheme to more than one ISP domain, thus avoiding the confused situation
where the RADIUS server regards two users in different ISP domains but with the same userid as
one.
z
The unit of data flows sent to the RADIUS server must be consistent with the traffic statistics unit
of the RADIUS server. Otherwise, accounting cannot be performed correctly.
z
The
nas-ip
command in RADIUS scheme view is only for the current RADIUS scheme, while the
radius nas-ip
command in system view is for all RADIUS schemes. However, the
nas-ip
command in RADIUS scheme view takes precedence over the
radius nas-ip
command.
Setting Timers Regarding RADIUS Servers
When communicating with the RADIUS server, a device can enable the following three timers:
z
RADIUS server response timeout (
response-timeout
): If a NAS receives no response from the
RADIUS server in a period of time after sending a RADIUS request (authentication/authorization
or accounting request), it has to resend the request so that the user has more opportunity to
obtain the RADIUS service. The NAS uses the RADIUS server response timeout timer to control
the transmission interval.
z
Primary server quiet timer (
timer quiet
): If the primary server is not reachable, its state changes to
blocked, and the device will turn to the specified secondary server. If the secondary server is
reachable, the device starts this timer and communicates with the secondary server. After this
timer expires, the device turns the state of the primary server to active and tries to communicate
with the primary server while keeping the state of the secondary server unchanged. If the primary
server has come back into operation, the device interacts with the primary server and terminates
its communication with the secondary server.
z
Real-time accounting interval
(
realtime-accounting
): This timer defines the interval for
performing real-time accounting of users. After this timer is set, the switch will send accounting
information of online users to the RADIUS server at the specified interval.
Follow these steps to set timers regarding RADIUS servers:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create a RADIUS scheme and
enter RADIUS scheme view
radius scheme
radius-scheme-name
Required
Not defined by default
Set the RADIUS server
response timeout timer
timer response-timeout
seconds
Optional
3 seconds by default
Set the quiet timer for the
primary server
timer quiet
minutes
Optional
5 minutes by default
