
46
To do…
Use the command…
Remarks
2.
Specify the source IP
address for RADIUS
packets to be sent
radius nas-ip
{
ip-address
[
vpn-instance
vpn-instance-
name
]
|
ipv6
ipv6-address
}
Required
By default, the IP address of the outbound
interface is used as the source IP address.
Follow these steps to specify a source IP address for a specific RADIUS scheme:
To do…
Use the command…
Remarks
1.
Enter system view
system-view
—
2.
Enter RADIUS scheme view
radius scheme
radius-
scheme-name
—
3.
Specify the source IP
address for RADIUS
packets to be sent
nas-ip
{
ip-address
|
ipv6
ipv6-address
}
Required
By default, the IP address of the outbound
interface is used as the source IP address.
Setting timers regarding RADIUS servers
When communicating with the RADIUS server, a switch can enable the following three timers:
•
RADIUS server response timeout (
response-timeout
): If a NAS receives no response from
the RADIUS server in a period of time after sending a RADIUS request
(authentication/authorization or accounting request), it has to resend the request so that the
user has more opportunity to obtain the RADIUS service. The NAS uses the RADIUS server
response timeout timer to control the transmission interval.
•
Server quiet timer (
quiet
): If a server is not reachable, the switch changes its state to
block
,
starts this timer for the server, and turns to a server in
active
state. After this timer expires,
the switch turns the state of the server to
active
.
•
Real-time accounting interval
(
realtime-accounting
): This timer defines the interval for
performing real-time accounting of users. After this timer is set, the switch will send
accounting information of online users to the RADIUS server at the specified interval.
Follow these steps to set timers regarding RADIUS servers:
To do…
Use the command…
Remarks
1.
Enter system view
system-view
—
2.
Enter RADIUS scheme view
radius scheme
radius-scheme-
name
—
3.
Set the RADIUS server response
timeout timer
timer response-timeout
seconds
Optional
3 seconds by default
4.
Set the quiet timer for the
primary server
timer quiet
minutes
Optional
5 minutes by default