49
By default, the source IP address of an outgoing RADIUS packet is that configured with the
radius nas-ip
command in system view.
The source IP address of RADIUS packets that a NAS sends must match the IP address of the NAS that
is configured on the RADIUS server. A RADIUS server identifies a NAS by its IP address. Upon receiving
a RADIUS packet, a RADIUS server checks whether the source IP address of the packet is the IP address
of any managed NAS. If yes, the server processes the packet. If not, the server drops the packet.
The source IP address specified for outgoing RADIUS packets must be of the same IP version as the IP
addresses of the RADIUS servers in the RADIUS scheme. Otherwise, the source IP address configuration
will not take effect.
NOTE:
The setting by the
nas-ip
command in RADIUS scheme view is only for the RADIUS scheme, whereas the
setting by the
radius nas-ip
command in system view is for all RADIUS schemes. The setting in RADIUS
scheme view takes precedence.
Related commands:
radius nas-ip
.
Examples
# Set the IP address for the device to use as the source address of the RADIUS packets to 10.1.1.1.
<Sysname> system-view
[Sysname] radius scheme test1
[Sysname-radius-test1] nas-ip 10.1.1.1
primary accounting (RADIUS scheme view)
Syntax
primary accounting
{
ipv4-address
|
ipv6
ipv6-address
} [
port-number
|
key
[
cipher
|
simple
]
key
] *
undo primary accounting
View
RADIUS scheme view
Default level
2: System level
Parameters
ipv4-address
: IPv4 address of the primary accounting server.
ipv6
ipv6-address
: IPv6 address of the primary accounting server.
port-number
: UDP port number of the primary accounting server, which ranges from 1 to 65535 and
defaults to 1813.
key
[
cipher
|
simple
]
key
: Specifies a case-sensitive shared key for secure communication with the
primary RADIUS accounting server.
•
cipher
key
: Specifies a ciphertext shared key, which is a string of 1 to 117 characters in non-FIPS
mode and a string of 8 to 117 characters in FIPS mode.
•
simple
key
: Specifies a plaintext shared key. In non-FIPS mode, the key is a string of 1 to 64
characters. In FIPS mode, the key is a string of 8 to 64 characters that must include uppercase letters,
lowercase letters, numbers, and special characters.
