Command Manual (For Soliton) – AAA
H3C S3100 Series Ethernet Switches
Chapter 1 AAA Configuration Commands
1-47
Parameters
ip-address
: IP address of the primary authentication/authorization server to be used, in
dotted decimal notation.
port-number
: UDP port number of the primary authentication/authorization server,
ranging from 1 to 65535.
Description
Use the
primary authentication
command to set the IP address and port number of
the primary RADIUS authentication/authorization server used by the current RADIUS
scheme.
Use the
undo primary authentication
command to restore the default IP address and
port number of the primary RADIUS authentication/authorization server, which are
0.0.0.0 and 1812 respectively.
In the system default RADIUS scheme “system”, the default IP address of the primary
authentication/authorization server is 127.0.0.1 and the default UDP port number is
1645. In a new RADIUS scheme, the default IP address of the primary
authentication/authorization server is 0.0.0.0 and the default UDP port number is 1812.
Note that:
z
After creating a new RADIUS scheme, you should configure the IP address and
UDP port number of each RADIUS server you want to use in this scheme. These
RADIUS servers fall into two types: authentication/authorization, and accounting.
For each kind of server, you can configure two servers in a RADIUS scheme:
primary and secondary servers.
z
In an actual network environment, you can make RADIUS server-related
configuration as required. But you should configure at least one
authentication/authorization server and one accounting server, and at the same
time, you should keep the RADIUS server port settings on the switch consistent
with those on the RADIUS servers.
Related commands:
key
,
radius scheme
,
state
.
Examples
# Set the IP address and UDP port number of the primary authentication/authorization
server for RADIUS scheme radius1 to 10.110.1.1 and 1812 respectively.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] radius scheme radius1
New Radius scheme
[Sysname-radius-radius1] primary authentication 10.110.1.1 1812
