H3C S5810 Series, Руководство по эксплуатации

Страница: 434 / 820

1-25
To do… Use the command… Remarks
Enter RADIUS scheme view
radius scheme
radius-scheme-name
—
Specify the RADIUS server
type supported by the device server-type { extended |
standard }
Optional
By default, the supported
RADIUS server type is
standard .
z
If you change the type of RADIUS server, the data stream destined to the original RADIUS server
will be restored to the default unit.
z
When a third-party RADIUS is used, you can configure the RADIUS server to standard or
extended . When an iMC server is used, you must configure the RADIUS server to extended.
Setting the Status of RADIUS Servers
When a primary server fails, the device automatically tries to communicate with the secondary server.
When both the primary and secondary servers are available, the device sends request packets to the
primary server.
Once the primary server fails, the primary server turns into the state of block, and the device turns to the
secondary server. In this case:
z
If the secondary server is available, the device triggers the primary server quiet timer. After the
quiet timer times out, the status of the primary server is active again and the status of the
secondary server remains the same.
z
If the secondary server fails, the device restores the status of the primary server to active
immediately.
If the primary server has resumed, the device turns to use the primary server and stops communicating
with the secondary server. After accounting starts, the communication between the client and the
secondary server remains unchanged.
Follow these steps to set the status of RADIUS servers:
To do… Use the command… Remarks
Enter system view system-view —
Enter RADIUS scheme view
radius scheme
radius-scheme-name
—
Set the status of the primary
RADIUS
authentication/authorization
server
state primary authentication
{ active | block }
Set the status of the primary
RADIUS accounting server state primary accounting
{ active | block }
Optional
active for every server
configured with IP address in
the RADIUS scheme