26
•
If one server is in the
active
state and all the others are in the
blocked
state, the router only tries to
communicate with the server in the
active
state, even if the server is unavailable.
•
After receiving an authentication/accounting response from a server, the router changes the status
of the server identified by the source IP address of the response to
active
if the current status of the
server is
blocked
.
By default, the router sets the status of all RADIUS servers to
active
. In some cases, however, you may
have to change the status of a server. For example, if a server fails, change the status of the server to
blocked
to avoid communication with the server.
To set the status of RADIUS servers in a RADIUS scheme:
To do…
Command…
Remarks
1.
Enter system view.
system-view
—
2.
Enter RADIUS scheme view.
radius scheme
radius-scheme-name
—
3.
Set the status of the primary
RADIUS authentication/
authorization server.
state
primary
authentication
{
active
|
block
}
Optional
active
for every server
specified in the
RADIUS scheme by
default
4.
Set the status of the primary
RADIUS accounting server.
state
primary
accounting
{
active
|
block
}
5.
Set the status of the secondary
RADIUS authentication/
authorization server.
state
secondary
authentication
[
ip
ipv4-
address
|
ipv6
ipv6-address
] {
active
|
block
}
6.
Set the status of the secondary
RADIUS accounting server.
state
secondary accounting
[
ip
ipv4-
address
|
ipv6
ipv6-address
] {
active
|
block
}
NOTE:
•
The server status set by
state
cannot be saved to the configuration file. After the router restarts, the
status of each server is restored to
active
.
•
To display the states of the servers, use
display radius scheme.
Setting the username format and traffic statistics units
A username is usually in the format of
userid
@
isp-name
, where
isp-name
represents the name of the
user's ISP domain. It is used by the router to determine which users belong to which ISP domains.
However, some earlier RADIUS servers cannot recognize usernames that contain an ISP domain name.
In this case, the router must remove the domain name of each username before sending the username.
Set the username format on the router for this purpose.
The router periodically sends accounting updates to RADIUS accounting servers to report the traffic
statistics of online users. For normal and accurate traffic statistics, make sure that the unit for data flows
and that for packets on the router are consistent with those on the RADIUS server.
To set the username format and the traffic statistics units for a RADIUS scheme:
To do…
Command…
Remarks
1.
Enter system view.
system-view
—
2.
Enter RADIUS scheme view.
radius scheme
radius-scheme-
name
—
