H3C SOHO IE4300, Command Reference Manual

Page: 1866 / 3296

85
•
When the RADIUS server load sharing feature is disabled, the device tries to communicate with
an active server that has the highest priority for authentication.
•
When the RADIUS server load sharing feature is enabled, the device performs the following
operations:
a. Checks the weight value and number of currently served users for each active server.
b. Determines the most appropriate server in performance to receive an AAA request.
Examples
# In RADIUS scheme radius1 , specify the primary authentication server with IP address 10.110.1.1,
UDP port number 1812, and plaintext shared key 123456TESTauth&! .
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary authentication 10.110.1.1 1812 key simple
123456TESTauth&!
Related commands
display radius scheme
key
(RADIUS scheme view)
radius-server test-profile
secondary authentication
(RADIUS scheme view)
server-load-sharing enable
vpn-instance
(RADIUS scheme view)
radius attribute extended
Use
radius attribute extended
to define an extended RADIUS attribute.
Use undo radius attribute extended to delete user-defined extended RADIUS attributes.
Syntax
radius attribute extended attribute-name [ vendor vendor-id ] code
attribute-code type { binary | date | integer | interface-id | ip | ipv6 |
ipv6-prefix | octets | string }
undo radius attribute extended [ attribute-name ]
Default
No user-defined extended RADIUS attributes exist.
Views
System view
Predefined user roles
network-admin
Parameters
attribute-name : Specifies the RADIUS attribute name, a case-insensitive string of 1 to 63
characters. The name must be unique among all RADIUS attributes, including the standard and
extended RADIUS attributes.
vendor vendor-id
: Specifies a vendor ID in the range of 1 to 65535. If you do not specify a
vendor ID, the device processes the RADIUS attribute as a standard RADIUS attribute.