110
Examples
# In RADIUS scheme
radius1
, set the primary authentication server to the blocked state.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] state primary authentication block
Related commands
display
radius scheme
radius-server test-profile
state
secondary
state secondary
Use
state
secondary
to set the status of a secondary RADIUS server.
Syntax
state
secondary
{
accounting
|
authentication
} [ {
ipv4-address
|
ipv6
ipv6-address
}
[
port-number
|
vpn-instance
vpn-instance-name
] *
] {
active
|
block
}
Default
A secondary RADIUS server is in active state.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
accounting
: Specifies a secondary RADIUS accounting server.
authentication
: Specifies a secondary RADIUS authentication server.
ipv4-address
: Specifies the IPv4 address of a secondary RADIUS server.
ipv6
ipv6-address
: Specifies the IPv6 address of a secondary RADIUS server.
port-number
: Sets the service port number of a secondary RADIUS server. The value range for the
UDP port number is 1 to 65535. The default port numbers for authentication and accounting are
1812 and 1813, respectively.
vpn-instance vpn-instance-name
: Specifies an MPLS L3VPN instance to which the secondary
RADIUS server belongs. The
vpn-instance-name
argument is a case-sensitive string of 1 to 31
characters.
active
: Specifies the active state, the normal operation state.
block
: Specifies the blocked state, the out-of-service state.
Usage guidelines
If you do not specify an IP address, this command changes the status of all configured secondary
RADIUS servers.
If the device finds that a secondary server in active state is unreachable, the device performs the
following operations:
•
Changes the status of the secondary server to blocked.
•
Starts a quiet timer for the server.
•
Tries to communicate with another secondary server in active state.
Summary of Contents for FlexNetwork MSR Series
Page 1005: ...987 ...
