90
The authentication, authorization, and accounting processes undertaken by other methods are not
switched to RADIUS when you re-enable the RADIUS service.
Examples
# Enable the RADIUS service.
<Sysname> system-view
[Sysname] radius enable
radius nas-ip
Use
radius nas-ip
to specify a source interface or source IP address for outgoing RADIUS
packets.
Use
undo radius nas-ip
to delete the specified source interface or source IP address for
outgoing RADIUS packets.
Syntax
radius
nas-ip
{
interface
interface-type interface-number
|
{
ipv4-address
|
ipv6
ipv6-address
}
[
vpn-instance
vpn-instance-name
]
}
undo radius nas-ip
{
interface
|
{
ipv4-address
|
ipv6
ipv6-address
}
[
vpn-instance
vpn-instance-name
]
}
Default
The source IP address of an outgoing RADIUS packet is the primary IPv4 address or the IPv6
address of the outbound interface.
Views
System view
Predefined user roles
network-admin
Parameters
interface
interface-type interface-number
: Specifies a source interface by its type
and number. The device uses the primary IPv4 address or the IPv6 address of the interface as the
source IP address of an outgoing RADIUS packet.
ipv4-address
: Specifies an IPv4 address, which must be an address of the device. The IP
address cannot be 0.0.0.0, 255.255.255.255, a class D address, a class E address, or a loopback
address.
ipv6
ipv6-address
: Specifies an IPv6 address, which must be a unicast address of the device
and cannot be a loopback address or a link-local address.
vpn-instance vpn-instance-name
: Specifies an MPLS L3VPN instance to which the source
IP address belongs. The
vpn-instance-name
argument is a case-sensitive string of 1 to 31
characters. To configure a public-network source IP address, do not specify this option.
Usage guidelines
The source IP address of RADIUS packets that a NAS sends must match the IP address of the NAS
that is configured on the RADIUS server. A RADIUS server identifies a NAS by its IP address. Upon
receiving a RADIUS packet, the RADIUS server checks the source IP address of the packet.
•
If the source IP address of the packet is the IP address of a managed NAS, the server
processes the packet.
•
If the source IP address of the packet is not the IP address of a managed NAS, the server drops
the packet.
Содержание SOHO IE4300
Страница 114: ...ii tftp client ipv6 source 41 tftp client source 41 tftp ipv6 42 tftp server acl 44 tftp server ipv6 acl 44...
Страница 285: ...i Contents Tcl commands 1 cli 1 tclquit 1 tclsh 2...
Страница 288: ...i Contents Python commands 1 exit 1 python 1 python filename 2...
Страница 291: ...i Contents Automatic configuration commands 1 autodeploy udisk enable 1...
Страница 323: ...25 Sysname Ten GigabitEthernet1 0 51 undo shutdown Related commands irf port...
Страница 396: ...i Contents Bulk interface configuration commands 1 display interface range 1 interface range 1 interface range name 3...
Страница 460: ...i Contents Port isolation commands 1 display port isolate group 1 port isolate enable 2 port isolate group 2...
Страница 465: ...ii stp vlan enable 55 vlan mapping modulo 55...
Страница 589: ...60 Examples Enable LLDP for automatic IP phone discovery Sysname system view Sysname voice vlan track lldp...
Страница 602: ...12 Related commands display mvrp statistics...
Страница 609: ...i Contents VLAN mapping commands 1 display vlan mapping 1 vlan mapping 2...
Страница 678: ...9 Related commands reset pppoe relay statistics...
Страница 846: ...i Contents Basic IP forwarding commands 1 display fib 1 ip forwarding table save 2...
Страница 1073: ...i Contents HTTP redirect commands 1 http redirect https port 1 http redirect ssl server policy 1...
Страница 1087: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1340: ...9 Sysname ipv6 route static default preference 120 Related commands display ipv6 routing table protocol...
Страница 1649: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1668: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1770: ...i Contents Time range commands 1 display time range 1 time range 1...
Страница 2026: ...34 Related commands display mac authentication...
Страница 2028: ...ii...
Страница 2143: ...i Contents User profile commands 1 display user profile 1 user profile 2...
Страница 2308: ...61 ipsec transform set...
Страница 2473: ...i Contents TCP attack prevention commands 1 tcp anti naptha enable 1 tcp check state interval 1 tcp state 2...
Страница 2531: ...i Contents SAVI commands 1 ipv6 savi down delay 1 ipv6 savi log enable 1 ipv6 savi strict 2...
Страница 2534: ...3 Sysname ipv6 savi strict Related commands ipv6 verify source...
Страница 2541: ...i Contents Crypto engine commands 1 display crypto engine 1 display crypto engine statistics 1 reset crypto engine statistics 3...
Страница 2545: ...i Contents FIPS commands 1 display crypto version 1 display fips status 1 fips mode enable 2 fips self test 4...
Страница 2791: ...14 Sysname track 1 Related commands delay display track...
Страница 2939: ...9 sntp authentication keyid sntp reliable authentication keyid...
Страница 2967: ...27 Related commands apply poe profile poe enable poe max power interface view poe priority...
Страница 3240: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 3263: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...