H3C SOHO IE4300, Command Reference Manual

Page: 1874 / 3296

93
Usage guidelines
To verify the session-control packets sent from a RADIUS server running on IMC, specify the
RADIUS server as a session-control client to the device. The device matches a session-control
packet to a session-control client based on the IP address and VPN instance, and then uses the
shared key of the matched client to validate the packet.
The device searches the session-control client settings prior to searching all RADIUS scheme
settings for a server with matching settings. This process narrows the search scope for finding the
matched RADIUS server.
The session-control client settings take effect only when the RADIUS session-control feature is
enabled.
The session-control client settings must be the same as the corresponding settings of the RADIUS
server.
You can specify multiple session-control clients on the device.
Examples
# Specify a session-control client with IP address 10.110.1.2 and shared key 12345 in plaintext form.
<Sysname> system-view
[Sysname] radius session-control client ip 10.110.1.2 key simple 12345
Related commands
radius session-control enable
radius session-control enable
Use
radius session-control enable
to enable the RADIUS session-control feature.
Use
undo radius session-control enable
to disable the RADIUS session-control feature.
Syntax
radius session-control enable
undo radius session-control enable
Default
The RADIUS session-control feature is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
An H3C IMC RADIUS server uses session-control packets to change the user authorization
information (such as the authorization ACL, VLAN, and user group) or forcibly disconnect users. The
session-control feature enables the device to receive the RADIUS session-control packets on UDP
port 1812.
This feature must work with H3C IMC servers.
If the device acts as the NAS and the IMC server deployed with EAD assigns authorization ACLs to
the device, you must enable the session-control feature on the device. This ensures that the
authorization ACLs can take effect.
Examples
# Enable the RADIUS session-control feature.