H3C SOHO IE4300, Command Reference Manual

Page: 1846 / 3296

65
In an IRF fabric, make sure a CA certificate file already exists in the root directory of the default
storage medium on the master device before you specify the file.
You can specify only one CA certificate file in an EAP profile. If you execute this command multiple
times, the most recent configuration takes effect.
If you change the CA certificate file, the new CA certificate file takes effect at the next server status
detection.
Examples
# In EAP profile eap1 , specify CA certificate file CA.der for EAP authentication.
<Sysname> system-view
[Sysname] eap-profile eap1
[Sysname-eap-profile-eap1] ca-file CA.der
client
Use client to specify a RADIUS DAC.
Use
undo client
to remove a RADIUS DAC.
Syntax
client { ip ipv4-address | ipv6 ipv6-address } [ key { cipher | simple }
string | vpn-instance vpn-instance-name ] *
undo client { ip ipv4-address | ipv6 ipv6-address } [ vpn-instance
vpn-instance-name ]
Default
No RADIUS DACs are specified.
Views
RADIUS DAS view
Predefined user roles
network-admin
Parameters
ip ipv4-address
: Specifies a DAC by its IPv4 address.
ipv6 ipv6-address
: Specifies a DAC by its IPv6 address.
key
: Specifies the shared key for secure communication between the RADIUS DAC and server.
Make sure the shared key is the same as the key configured on the RADIUS DAC. If the RADIUS
DAC does not have any shared key, do not specify this option.
cipher
: Specifies the key in encrypted form.
simple
: Specifies the key in plaintext form. For security purposes, the key specified in plaintext
form will be stored in encrypted form.
string
: Specifies the key. This argument is case sensitive. In non-FIPS mode, the encrypted form
of the key is a string of 1 to 117 characters. The plaintext form of the key is a string of 1 to 64
characters. In FIPS mode, the encrypted form of the key is a string of 15 to 117 characters. The
plaintext form of the key is a string of 15 to 64 characters. The plaintext string must contain
characters from digits, uppercase letters, lowercase letters, and special characters.
vpn-instance vpn-instance-name
: Specifies an MPLS L3VPN instance to which the
RADIUS DAC belongs. The
vpn-instance-name
argument is a case-sensitive string of 1 to 31
characters. If the server is on the public network, do not specify this option.