6
Predefined user roles
network-admin
mdc-admin
Parameters
broadcast
: Broadcasts accounting requests to servers in RADIUS schemes.
radius-scheme
radius-scheme-name1
: Specifies the primary broadcast RADIUS scheme by its
name, a case-insensitive string of 1 to 32 characters.
radius-scheme
radius-scheme-name2
: Specifies the backup broadcast RADIUS scheme by its
name, a case-insensitive string of 1 to 32 characters.
local
: Performs local accounting.
none
: Does not perform accounting.
radius-scheme
radius-scheme-name
: Specifies a RADIUS scheme by its name, a case-insensitive
string of 1 to 32 characters.
Usage guidelines
You can specify one primary accounting method and multiple backup accounting methods.
When the primary method is invalid, the device attempts to use the backup methods in sequence.
For example, the
accounting lan-access radius-scheme
radius-scheme-name
local
none
command specifies a primary RADIUS accounting method and two backup methods (local
accounting and no accounting). The device performs RADIUS accounting by default and performs
local accounting when the RADIUS server is invalid. The device does not perform accounting when
both of the previous methods are invalid.
The following guidelines apply to broadcast accounting:
•
The device sends accounting requests to the primary accounting servers in the specified
broadcast RADIUS schemes at the same time. If the primary server is unavailable in a scheme,
the device sends accounting requests to the secondary servers of the scheme in the order the
servers are configured.
•
The accounting result is determined by the primary broadcast RADIUS scheme. The
accounting result from the backup scheme is used as reference only. If the primary scheme
does not return any result, the device considers the accounting as a failure.
Examples
# In ISP domain
test
, perform local accounting for LAN users.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] accounting lan-access local
# In ISP domain
test
, perform RADIUS accounting for LAN users based on scheme
rd
and use local
accounting as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] accounting lan-access radius-scheme rd local
# In ISP domain
test
, broadcast accounting requests of LAN users to RADIUS servers in schemes
rd1
and
rd2
, and use local accounting as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] accounting lan-access broadcast radius-scheme rd1 radius-scheme rd2
local
Содержание FlexNetwork 7500 Series
Страница 350: ...335 Related commands display port security port security enable ...
Страница 379: ...364 Sysname system view Sysname keychain abc mode absolute Sysname keychain abc tcp kind 252 ...
Страница 519: ...504 Related commands display ssh2 algorithm ssh2 algorithm cipher ssh2 algorithm key exchange ssh2 algorithm mac ...