77
Use
undo client
to remove a RADIUS DAC.
Syntax
client
{
ip ipv4-address
|
ipv6 ipv6-address
} [
key
{
cipher
|
simple
}
string
|
vpn-instance
vpn-instance-name
] *
undo client
{
ip ipv4-address
|
ipv6
ipv6-address
} [
vpn-instance
vpn-instance-name
]
Default
No RADIUS DACs are specified.
Views
RADIUS DAS view
Predefined user roles
network-admin
mdc-admin
Parameters
ip
ipv4-address
: Specifies a DAC by its IPv4 address.
ipv6
ipv6-address
: Specifies a DAC by its IPv6 address.
key
: Specifies the shared key for secure communication between the RADIUS DAC and server.
Make sure the shared key is the same as the key configured on the RADIUS DAC. If the RADIUS
DAC does not have any shared key, do not specify this option.
cipher
: Specifies the key in encrypted form.
simple
: Specifies the key in plaintext form. For security purposes, the key specified in plaintext form
will be stored in encrypted form.
string
: Specifies the key. This argument is case sensitive.
•
In non-FIPS mode, the encrypted form of the key is a string of 1 to 117 characters. The plaintext
form of the key is a string of 1 to 64 characters.
•
In FIPS mode, the encrypted form of the key is a string of 15 to 117 characters. The plaintext
form of the key is a string of 15 to 64 characters. The plaintext string must contain characters
from digits, uppercase letters, lowercase letters, and special characters.
vpn-instance vpn-instance-name
: Specifies an MPLS L3VPN instance to which the RADIUS DAC
belongs. The
vpn-instance-name
argument is a case-sensitive string of 1 to 31 characters. If the
server is on the public network, do not specify this option.
Usage guidelines
With the RADIUS DAS feature, the device listens to the default or specified UDP port to receive DAE
requests from the specified DACs. The device processes the requests and sends DAE responses to
the DACs.
The device discards any DAE packets sent from DACs that are not specified for the DAS.
You can execute the
client
command multiple times to specify multiple DACs for the DAS.
Examples
# Specify the DAC as 10.110.1.2. Set the shared key to
123456
in plaintext form for secure
communication between the DAS and DAC.
<Sysname> system-view
[Sysname] radius dynamic-author server
[Sysname-radius-da-server] client ip 10.110.1.2 key simple 123456
Related commands
radius dynamic-author server
