Operation Manual – AAA RADIUS HWTACACS
H3C S5500-EI Series Ethernet Switches
Chapter 1 AAA/RADIUS/HWTACACS
Configuration
1-27
1.4.4 Setting the Shared Key for RADIUS Packets
The RADIUS client and RADIUS server use the MD5 algorithm to encrypt packets
exchanged between them and a shared key to verify the packets. Only when the same
key is used can they properly receive the packets and make responses.
Follow these steps to set the shared key for RADIUS packets:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create a RADIUS scheme
and enter RADIUS
scheme view
radius scheme
radius-scheme-name
Required
Not defined by default
Set the shared key for
RADIUS
authentication/authorizati
on or accounting packets
key
{
accounting
|
authentication
}
string
Required
No key by default
Note:
The shared key configured on the device must be the same as that configured on the
RADIUS server.
1.4.5 Setting the Maximum Number of RADIUS Request Retransmission
Attempts
Because RADIUS uses UDP packets to carry data, the communication process is not
reliable. If a NAS receives no response from the RADIUS server before the response
timeout timer expires, it is required to retransmit the RADIUS request. If the number of
transmission attempts exceeds the specified limit but it still receives no response, it
considers the authentication a failure.
Follow these steps to set the maximum number of RADIUS request retransmission
attempts:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create a RADIUS scheme
and enter RADIUS
scheme view
radius scheme
radius-scheme-name
Required
Not defined by default
Set the number of
retransmission attempts
of RADIUS packets
retry
retry-times
Optional
3 by default