3Com S7902E, Руководство по настройке

Страница: 1845 / 2621

1-26
z
It is recommended to specify only the primary RADIUS authentication/authorization server if
backup is not required.
z
If both the primary and secondary authentication/authorization servers are specified, the
secondary one is used when the primary one is unreachable.
z
In practice, you may specify two RADIUS servers as the primary and secondary
authentication/authorization servers respectively. At one time, a server can be the primary
authentication/authorization server for a scheme and the secondary authentication/authorization
servers for another scheme.
z
The IP addresses of the primary and secondary authentication/authorization servers for a scheme
cannot be the same. Otherwise, the configuration fails.
z
All servers for authentication/authorization and accountings, primary or secondary, must use IP
addresses of the same IP version.
Specifying the RADIUS Accounting Servers and Relevant Parameters
Follow these steps to specify the RADIUS accounting servers and perform related configurations:
To do… Use the command… Remarks
Enter system view system-view —
Enter RADIUS scheme view
radius scheme
radius-scheme-name
—
Specify the primary RADIUS
accounting server
primary accounting
{ ip-address | ipv6
ipv6-address } [ port-number ]
Specify the secondary RADIUS
accounting server
secondary accounting
{ ip-address | ipv6
ipv6-address } [ port-number ]
Required
Configure at least one of the
commands
No accounting server by default
Enable the device to buffer
stop-accounting requests
getting no responses
stop-accounting-buffer
enable
Optional
Enabled by default
Set the maximum number of
stop-accounting request
transmission attempts
retry stop-accounting
retry-times
Optional
500 by default
Set the maximum number of
accounting request
transmission attempts
retry realtime-accounting
retry-times
Optional
5 by default