HP HP ProCurve Series 6600, Access Security Manual

Page: 307 / 778

6-73
RADIUS Authentication, Authorization, and Accounting
Changing RADIUS-Server Access Order
Figure 6-32. Search Order for Accessing a RADIUS Server
To exchange the positions of the addresses so that the server at 10.10.10.3 will
be the first choice and the server at 10.10.10.1 will be the last, you would do
the following:
1. Delete 10.10.10.3 from the list. This opens the third (lowest) position in
the list.
2. Delete 10.10.10.1 from the list. This opens the first (highest) position in
the list.
3. Re-enter 10.10.10.3. Because the switch places a newly entered address
in the highest-available position, this address becomes first in the list.
4. Re-enter 10.10.10.1. Because the only position open is the third position,
this address becomes last in the list.
HP Switch# show radius
Status and Counters - General RADIUS Information
Deadtime(min) : 0
Timeout(secs) : 5
Retransmit Attempts : 3
Global Encryption Key :
Dynamic Authorization UDP Port : 3799
Source IP Selection : Outgoing Interface
Auth Acct DM/ Time
Server IP Addr Port Port CoA Window Encryption Key OOBM
--------------- ---- ---- --- ------ -------------------------------- ----
10.10.10.1 1812 1813 No 300 No
10.10.10.2 1812 1813 No 300 No
10.10.10.3 1812 1813 No 300 No
RADIUS server IP addresses listed in the order
in which the switch will try to access them. In this
case, the server at IP address 10.10.10.1 is first.
Note: If the switch successfully accesses the
first server, it does not try to access any other
servers in the list, even if the client is denied
access by the first server.