Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-39
when the switch serves as a RADIUS authentication server, it can support at most
16 network access servers simultaneously to provide authentication.
Related command:
radius scheme
and
state
.
Example
# Create a network access server granted by the RADIUS authentication server with an
IP address of 10.110.1.2 and a shared key of aabbcc.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] local-server nas-ip 10.110.1.2 key aabbcc
1.2.8 local-server nas-ip
Syntax
local-server nas-ip ip-address key password
undo local-server nas-ip ip-address
View
System view
Parameter
nas-ip ip-address
: Sets the IP address, represented in dotted decimal notation, of the
network access server allowed by the local RADIUS server.
key password
: Sets the shared key, a string of up to 16 characters, of the local server.
Description
Use the
local-server nas-ip
command to configure the related parameters of the local
RADIUS server.
Use the
undo local-server nas-ip
command to remove a local RADIUS server
configured.
By default, the system has created a local RADIUS server with 127.0.0.1 as NAS-IP
address and a null string as shared key.
Note that:
z
When the local RADIUS authentication server function is used, the UDP port
number used for authentication/authorization must be 1645 and that for
accounting must be 1646.
z
The shared key configured with this command and that configured with the
key
{
accounting
|
authentication
} command in RADIUS scheme view for
authentication/authorization or accounting packets must be the same.
z
The device supports up to 16 local RADIUS authentication servers.
