62
A RADIUS scheme can have only one source IP address for outgoing RADIUS packets. If you
specify a new source IP address for the same RADIUS scheme, the new one overwrites the old one.
The setting configured by the
nas-ip
command in RADIUS scheme view is only for the RADIUS
scheme, whereas that configured by the
radius nas-ip
command in system view is for all RADIUS
schemes. The setting in RADIUS scheme view takes precedence.
Examples
# Set the source IP address for outgoing RADIUS packets to 10.1.1.1.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] nas-ip 10.1.1.1
Related commands
radius nas-ip
primary accounting (RADIUS scheme view)
Use
primary accounting
to specify the primary RADIUS accounting server.
Use
undo primary accounting
to remove the configuration.
Syntax
primary accounting
{
ipv4-address
|
ipv6
ipv6-address
} [
port-number
|
key
[
cipher
|
simple
]
key
|
vpn-instance
vpn-instance-name
] *
undo primary accounting
Default
No primary RADIUS accounting server is specified.
Views
RADIUS scheme view
Default command level
2: System level
Parameters
ipv4-address
: Specifies the IPv4 address of the primary RADIUS accounting server.
ipv6
ipv6-address
: Specifies the IPv6 address of the primary RADIUS accounting server, which must
be a valid global unicast address.
port-number
: Specifies the service port number of the primary RADIUS accounting server, which is a
UDP port number ranging from 1 to 65535 and defaults to 1813.
key
[
cipher
|
simple
]
key
: Specifies the shared key for secure communication with the primary
RADIUS accounting server. In FIPS mode, the shared key must be a string of at least 8 characters
that contain numbers, uppercase letters, lowercase letters, and special characters, and is encrypted
and decrypted by using 3DES.
•
cipher
key
: Specifies a ciphertext shared key, which is a case-sensitive ciphertext string of 1 to
117 characters.
•
simple
key
: Specifies a plaintext shared key, which is a case-sensitive string of 1 to 64
characters.
•
If neither
cipher
nor
simple
is specified, you set a plaintext shared key string.
vpn-instance
vpn-instance-name
: Specifies the MPLS L3VPN to which the primary RADIUS
accounting server belongs. The
vpn-instance-name
argument is a case-sensitive string of 1 to 31
characters. If the server is on the public network, do not specify this option.
