104
•
When the RADIUS server load sharing feature is enabled, the device returns an accounting
failure message rather than searching for another active accounting server.
If you remove an actively used accounting server, the device no longer sends users' real-time
accounting requests and stop-accounting requests. The device does not buffer the stop-accounting
requests, either.
Examples
# In RADIUS scheme
radius1
, specify a secondary accounting server with IP address 10.110.1.1
and UDP port 1813.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] secondary accounting 10.110.1.1 1813
# In RADIUS scheme
radius2
, specify two secondary accounting servers with IP addresses
10.110.1.1 and 10.110.1.2 and UDP port 1813.
<Sysname> system-view
[Sysname] radius scheme radius2
[Sysname-radius-radius2] secondary accounting 10.110.1.1 1813
[Sysname-radius-radius2] secondary accounting 10.110.1.2 1813
Related commands
display radius scheme
key
(RADIUS scheme view)
primary accounting
(RADIUS scheme view)
vpn-instance
(RADIUS scheme view)
secondary authentication (RADIUS scheme view)
Use
secondary authentication
to specify a secondary RADIUS authentication server.
Use
undo secondary authentication
to remove a secondary RADIUS authentication server.
Syntax
secondary authentication
{
host-name
|
ipv4-address
|
ipv6
ipv6-address
} [
port-number
|
key
{
cipher
|
simple
}
string
|
test-profile
profile-name
|
vpn-instance
vpn-instance-name
|
weight
weight-value
] *
undo secondary authentication
[ {
host-name
|
ipv4-address
|
ipv6
ipv6-address
}
[
port-number
|
vpn-instance
vpn-instance-name
] * ]
Default
No secondary RADIUS authentication servers are specified.
Views
RADIUS scheme view
Predefined user roles
network-admin
mdc-admin
Parameters
host-name
: Specifies the host name of a secondary RADIUS authentication server, a
case-insensitive string of 1 to 253 characters.
ipv4-address
: Specifies the IPv4 address of a secondary RADIUS authentication server.
