3Com MSR 50 Series, Configuration Manual

Page: 1773 / 2443

Configuring RADIUS 1773
When both the primary and secondary servers are available, the device sends
request packets to the primary server.
Once the primary server fails, the primary server transfers into the state of block ,
and the device turns to the secondary server. In this case:
■
If the secondary server is available, the device triggers the primary server quiet
timer. After the quiet timer times out, the status of the primary server is active
again and the status of the secondary server remains the same.
■
If the secondary server fails, the device restores the status of the primary server
to active immediately.
If the primary server has resumed, the device turns to use the primary server and
stops communicating with the secondary server. After accounting starts, the
communication between the client and the secondary server remains unchanged.
Follow these steps to set the status of RADIUS servers:
n
■
If both the primary server and the secondary server are in the blocked state, it
is necessary to manually turn the secondary server to the active state so that
the secondary server can perform authentication. If the secondary server is still
in the blocked state, the primary/secondary switchover cannot take place.
■
If one server is in the active state while the other is blocked, the
primary/secondary switchover will not take place even if the active server is not
reachable.
Configuring Attributes
Related to the Data Sent
to the RADIUS Server
Follow these steps to configure the attributes related to the data sent to the
RADIUS server:
To do... Use the command... Remarks
Enter system view system-view -
Create a RADIUS scheme and
enter RADIUS scheme view radius scheme
radius-scheme-name
Required
By default, no RADIUS
scheme is created.
Set the status of the primary
RADIUS
authentication/authorization
server state primary
authentication
{ active |
block }
Optional
active for every server
configured with IP address
in the RADIUS scheme
Set the status of the primary
RADIUS accounting server state primary accounting
{ active | block }
Set the status of the secondary
RADIUS
authentication/authorization
server state secondary
authentication
{ active |
block }
Set the status of the secondary
RADIUS accounting server state secondary accounting
{ active | block }
To do... Use the command... Remarks
Enter system view system-view -