Command Manual – Security
Quidway S8500 Series Routing Switches
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Configuration Commands
Huawei Technologies Proprietary
2-44
2.2.24 state
Syntax
state
{
primary
|
secondary
} {
accounting
|
authentication
} {
block
|
active
}
View
RADIUS scheme view
Parameter
primary
: Configures to set the state of the primary RADIUS server.
secondary
: Configures to set the state of the secondary RADIUS server.
accounting
: Configures to set the state of RADIUS accounting server.
authentication
: Configures to set the state of RADIUS authentication/authorization.
block
: Configures the RADIUS server to be in the state of
block
.
active
: Configures the RADIUS server to be
active
, namely the normal operation state.
Description
Use the
state
command to configure the state of RADIUS server.
By default, all the RADIUS servers in every RADIUS scheme are in the state of
active
.
For the primary and secondary servers (no matter an authentication/authorization or an
accounting server), if the primary server is disconnected to NAS for some fault, NAS
will automatically turn to exchange packets with the secondary server. However, after
the primary one recovers, NAS will not resume the communication with it at once,
instead, it continues communicating with the secondary one. When the secondary one
fails to communicate, NAS will turn to the primary one again. This command is used to
set the primary server to be
active
manually, in order that NAS can communicate with it
right after the troubleshooting.
When the primary and secondary servers are all
active
or
block
, NAS will send the
packets to the primary server only.
Related command:
radius scheme
,
primary authentication
,
secondary
authentication
,
primary accounting
,
secondary accounting
.
Example
# Set the secondary authentication server of RADIUS scheme, “huawei”, to be Active.
[Quidway-radius-huawei] state secondary authentication active
