63
Usage guidelines
Make sure the port number and shared key settings of the primary RADIUS accounting server are
the same as those configured on the server.
The shared key configured by this command takes precedence over that configured by using the
key
accounting
[
cipher
|
simple
]
key
command. For secrecy, all shared keys, including keys
configured in plain text, are saved in cipher text.
The IP addresses of the accounting servers and those of the authentication/authorization servers
must be of the same IP version.
The IP addresses of the primary and secondary accounting servers must be different from each other.
Otherwise, the configuration fails.
If the specified server resides on an MPLS L3VPN, specify the VPN by using the
vpn-instance
vpn-instance-name
option. The VPN specified by this command takes precedence over the VPN
specified for the RADIUS scheme.
If you change the primary accounting server when the device has already sent a start-accounting
request to the server, the communication with the primary server times out, and the device looks for
a server in active state from the new primary server on.
If you remove an accounting server being used by users, the device can no longer send real-time
accounting requests or stop-accounting requests for the users, and it does not buffer the
stop-accounting requests.
Examples
# For RADIUS scheme
radius1
, set the IP address of the primary accounting server to 10.110.1.2,
the UDP port to 1813, and the shared key to
hello
in plain text.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary accounting 10.110.1.2 1813 key simple hello
Related commands
•
key
(RADIUS scheme view)
•
vpn-instance
(RADIUS scheme view)
primary authentication (RADIUS scheme view)
Use
primary authentication
to specify the primary RADIUS authentication/authorization server.
Use
undo primary authentication
to remove the configuration.
Syntax
primary authentication
{
ipv4-address
|
ipv6
ipv6-address
} [
port-number
|
key
[
cipher
|
simple
]
key
|
probe username
name
[
interval
interval
]
|
vpn-instance
vpn-instance-name
] *
undo primary authentication
Default
No primary RADIUS authentication/authorization server is specified.
Views
RADIUS scheme view
Default command level
2: System level
Parameters
ipv4-address
: Specifies the IPv4 address of the primary RADIUS authentication/authorization server.
