H3C S5500-SI Series, Operation Manual

Page: 574 / 1217

1-30
This task allows you to configure the IP address of a security policy server. If the security policy server
and the RADIUS server reside on the same host, you can omit this task. When the device receives a
control packet from the security policy server, it checks whether the source IP address of the packet is
the IP address of the security policy server or RADIUS server. If not, the device considers the packet
invalid.
Follow these steps to specify a security policy server:
To do… Use the command… Remarks
Enter system view system-view —
Create a RADIUS scheme
and enter its view radius scheme
radius-scheme-name
Required
By default, no RADIUS scheme
is present.
Specify a security policy
server security-policy-server
ip-address
Optional
Not specified by default
You can specify up to eight security policy servers for a RADIUS scheme.
Enabling the Listening Port of the RADIUS Client
Follow these steps to enable the listening port of the RADIUS client:
To do… Use the command… Remarks
Enter system view system-view —
Enable the listening port of the RADIUS
client
radius client enable
Optional
Enabled by default
Displaying and Maintaining RADIUS
To do… Use the command… Remarks
Display the configuration
information of a specified
RADIUS scheme or all RADIUS
schemes
display radius scheme
[ radius-scheme-name ]
Available in any view
Display statistics about RADIUS
packets
display radius statistics Available in any view
Display information about
buffered stop-accounting
requests that get no responses
display stop-accounting-buffer
{ radius-scheme
radius-server-name | session-id
session-id | time-range start-time
stop-time | user-name user-name }
Available in any view
Clear RADIUS statistics reset radius statistics Available in user view