111
The IP addresses of the primary and secondary accounting servers must be different from each other.
Otherwise, the configuration fails.
If you remove a secondary accounting server when the device has already sent a start-accounting
request to the server, the communication with the secondary server will time out, and the device will look
for a server in active state from the primary server on.
If you remove an accounting server being used by online users, the device cannot send real-time
accounting requests and stop-accounting requests anymore for the users, and does not buffer the
stop-accounting requests.
NOTE:
The shared key configured by this command takes precedence over that configured by using the
key
accounting
key command..
Related commands:
key
and
state
.
Examples
# For RADIUS scheme
radius1
, set the IP address of the secondary accounting server to 10.110.1.1, the
UDP port to 1813.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] secondary accounting 10.110.1.1 1813
# For RADIUS scheme
radius2,
specify two secondary accounting servers with the server IP addresses of
10.110.1.1 and 10.110.1.2 and the UDP port number of 1813.
<Sysname> system-view
[Sysname] radius scheme radius2
[Sysname-radius-radius2] secondary accounting 10.110.1.1 1813
[Sysname-radius-radius2] secondary accounting 10.110.1.2 1813
secondary authentication (RADIUS scheme view)
Syntax
secondary authentication
ipv4-address
[
port-number
]
undo secondary authentication
View
RADIUS scheme view
Default level
2: System level
Parameters
ipv4-address
: IPv4 address of the secondary authentication/authorization server.
port-number
: Service port number of the secondary authentication/authorization server, a UDP port
number in the range 1 to 65535. The default is 1812.
Description
Use the
secondary authentication
command to specify secondary RADIUS authentication/authorization
servers for a RADIUS scheme.
