H3C SOHO IE4300, Command Reference Manual

Page: 1864 / 3296

83
Usage guidelines
Make sure the port number and shared key settings of the primary RADIUS accounting server are
the same as those configured on the server.
Two accounting servers specified for a scheme, primary or secondary, cannot have identical VPN
instance, host name, IP address, and port number settings.
The shared key configured by using this command takes precedence over the shared key configured
with the
key accounting
command.
If the specified server resides on an MPLS L3VPN, specify the VPN instance by using the
vpn-instance vpn-instance-name
option. The VPN instance specified by this command
takes precedence over the VPN instance specified for the RADIUS scheme.
If you use the
primary accounting
command to modify or delete the primary accounting server
to which the device is sending a start-accounting request, communication with the primary server
times out.
•
When the RADIUS server load sharing feature is disabled, the device tries to communicate with
an active server that has the highest priority for accounting.
•
When the RADIUS server load sharing feature is enabled, the device returns an accounting
failure message rather than searching for another active accounting server.
If you remove an actively used accounting server, the device no longer sends users' real-time
accounting requests and stop-accounting requests. It does not buffer the stop-accounting requests.
The device can generate incorrect accounting results.
Examples
# In RADIUS scheme radius1 , specify the primary accounting server with IP address 10.110.1.2,
UDP port number 1813, and plaintext shared key 123456TESTacct&! .
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary accounting 10.110.1.2 1813 key simple 123456TESTacct&!
Related commands
display radius scheme
key (RADIUS scheme view)
secondary accounting
(RADIUS scheme view)
server-load-sharing enable
vpn-instance
(RADIUS scheme view)
primary authentication (RADIUS scheme view)
Use
primary authentication
to specify the primary RADIUS authentication server.
Use undo primary authentication to restore the default.
Syntax
primary authentication { host-name | ipv4-address | ipv6 ipv6-address }
[ port-number | key { cipher | simple } string | test-profile profile-name |
vpn-instance vpn-instance-name | weight weight-value ] *
undo primary authentication
Default
The primary RADIUS authentication server is not specified.