50
•
If neither
cipher
nor
simple
is specified, you set a plaintext shared key string.
Description
Use the
primary accounting
command to specify the primary RADIUS accounting server.
Use the
undo primary accounting
command to remove the configuration.
By default, no primary RADIUS accounting server is specified.
The IP addresses of the primary and secondary accounting servers cannot be the same. Otherwise, the
configuration fails.
The RADIUS service port configured on the device and that of the RADIUS server must be consistent.
The shared key configured on the device for accounting packets and that configured on the RADIUS
server must be consistent.
The shared key configured by this command takes precedence over that configured by using the
key
accounting
[
cipher
|
simple
]
key
command.
The IP addresses of the primary and secondary accounting servers must be of the same IP version.
The IP addresses of the accounting servers and those of the authentication/authorization servers must be
of the same IP version.
If you change the primary accounting server when the device is already sending a start-accounting
request to the server, the communication with the original primary server will time out, and then the
device will look for a server in active state from scratch: the new primary server is evaluated at first and
then the secondary servers according to the order in which they are configured.
If you remove an accounting server being used by online users, the device cannot send real-time
accounting requests and stop-accounting requests anymore for the users, and does not buffer the
stop-accounting requests.
For security purposes, all shared keys, including shared keys configured in plain text, are saved in
ciphertext.
Related commands:
key
,
radius scheme
, and
state
.
Examples
# Specify the IP address of the primary accounting server for RADIUS scheme
radius1
as 10.110.1.2 and
the UDP port of the server as 1813.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary accounting 10.110.1.2 1813
primary authentication (RADIUS scheme view)
Syntax
primary authentication
{
ipv4-address
|
ipv6
ipv6-address
} [
port-number
|
key
[
cipher
|
simple
]
key
|
probe username
name
[
interval
interval
]
] *
undo primary authentication
View
RADIUS scheme view
