48
To do…
Use the command…
Remarks
3.
Specify a security policy
server
security-policy-server
ip-address
Optional
Not specified by default
•
If more than one interface of the switch is configured with user access authentication functions, the
interfaces may use different security policy servers. You can specify up to eight security policy servers for
a RADIUS scheme.
•
If the RADIUS server and the security policy server reside on the same physical switch, you do not need to
configure the IP address of the security policy server.
•
The specified security policy server must be a security policy server or RADIUS server that is correctly
configured and working normally. Otherwise, the switch will regard it as an illegal server.
Enabling the listening port of the RADIUS client
Follow these steps to enable the listening port of the RADIUS client:
To do…
Use the command…
Remarks
1.
Enter system view
system-view
—
2.
Enable the listening port of the RADIUS
client
radius client enable
Optional
Enabled by default
Specifying to interpret RADIUS class attribute as CAR
parameters
According to RFC 2865, a RADIUS server assigns the RADIUS class attribute (25) to a RADIUS
client. However, the RFC only requires the RADIUS client to send the attribute to the accounting
server; it does not require the RADIUS client to resolve the attribute. Currently, some RADIUS
servers use the class attribute to deliver the assigned committed access rate (CAR) parameters. To
support such applications, you need to configure the RADIUS client to interpret the class attribute
as the CAR parameters.
Follow these steps to configure the RADIUS client to interpret the class attribute as the CAR
parameters:
To do…
Use the command…
Remarks
1.
Enter system view
system-view
—
2.
Enter RADIUS scheme view
radius scheme
radius-
scheme-name
—
3.
Specify to interpret the class
attribute as the CAR parameters
attribute 25 car
Required
Be default, RADIUS attribute 25 is not
interpreted as CAR parameters.
