H3C SOHO IE4300, Command Reference Manual

Page: 1873 / 3296

92
Usage guidelines
A RADIUS scheme can be used by more than one ISP domain at the same time.
The device supports a maximum of 16 RADIUS schemes.
Examples
# Create a RADIUS scheme named radius1 and enter RADIUS scheme view.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1]
Related commands
display radius scheme
radius session-control client
Use radius session-control client to specify a RADIUS session-control client.
Use
undo radius session-control client
to remove the specified RADIUS
session-control clients.
Syntax
radius session-control client { ip ipv4-address | ipv6 ipv6-address } [ key
{ cipher | simple } string | vpn-instance vpn-instance-name ] *
undo radius session-control client { all | { ip ipv4-address | ipv6
ipv6-address } [ vpn-instance vpn-instance-name ] }
Default
No RADIUS session-control clients are specified.
Views
System view
Predefined user roles
network-admin
Parameters
ip ipv4-address
: Specifies a session-control client by its IPv4 address.
ipv6 ipv6-address
: Specifies a session-control client by its IPv6 address.
key
: Specifies the shared key for secure communication with the session-control client.
cipher
: Specifies the key in encrypted form.
simple : Specifies the key in plaintext form. For security purposes, the key specified in plaintext
form will be stored in encrypted form.
string
: Specifies the key. This argument is case sensitive. In non-FIPS mode, the encrypted form
of the key is a string of 1 to 117 characters. The plaintext form of the key is a string of 1 to 64
characters. In FIPS mode, the encrypted form of the key is a string of 15 to 117 characters. The
plaintext form of the key is a string of 15 to 64 characters. The plaintext string must contain digits,
uppercase letters, lowercase letters, and special characters.
vpn-instance vpn-instance-name
: Specifies an MPLS L3VPN instance to which the
RADIUS session-control client belongs. The vpn-instance-name argument is a case-sensitive
string of 1 to 31 characters. If the client is on the public network, do not specify this option.
all
: Specifies all session-control clients.