H3C SOHO IE4300, Command Reference Manual

Page: 1872 / 3296

91
As a best practice, specify a loopback interface address as the source IP address for outgoing
RADIUS packets to avoid RADIUS packet loss caused by physical port errors.
If you use both the
nas-ip
command and
radius nas-ip
command, the following guidelines
apply:
•
The setting configured by using the
nas-ip
command in RADIUS scheme view applies only to
the RADIUS scheme.
•
The setting configured by using the radius nas-ip command in system view applies to all
RADIUS schemes.
•
The setting in RADIUS scheme view takes precedence over the setting in system view.
You can specify a maximum of 16 source IP addresses in system view, including:
•
Zero or one public-network source IPv4 address.
•
Zero or one public-network source IPv6 address.
•
Private-network source IP addresses.
Each VPN instance can have only one private-network source IPv4 address and one private-network
source IPv6 address in system view.
You can specify only one source interface to provide the source IP address for outgoing RADIUS
packets. Make sure the route between the source interface and the RADIUS server is reachable.
The source interface configuration and the source IP address configuration overwrite each other.
Examples
# Specify IP address 129.10.10.1 as the source IP address for outgoing RADIUS packets.
<Sysname> system-view
[Sysname] radius nas-ip 129.10.10.1
Related commands
nas-ip
(RADIUS scheme view)
radius scheme
Use
radius scheme
to create a RADIUS scheme and enter its view, or enter the view of an
existing RADIUS scheme.
Use
undo radius scheme
to delete a RADIUS scheme.
Syntax
radius scheme radius-scheme-name
undo radius scheme radius-scheme-name
Default
No RADIUS schemes exist.
Views
System view
Predefined user roles
network-admin
Parameters
radius-scheme-name
: Specifies the RADIUS scheme name, a case-insensitive string of 1 to 32
characters.