F3215-HP Load Balancing Module Security Command Reference-6PW101

80
Syntax
primary accounting { ipv4-address | ipv6 ipv6-address } [ port-number | key [ cipher | simple ] key |
vpn-instance vpn-instance-name ] *
undo primary accounting
Default
No primary RADIUS accounting server is specified.
Views
RADIUS scheme view
Default command level
2: System level
Parameters
ipv4-address: Specifies the IPv4 address of the primary RADIUS accounting server.
ipv6 ipv6-address: Specifies the IPv6 address of the primary RADIUS accounting server, which must be
a valid global unicast address.
port-number: Specifies the service port number of the primary RADIUS accounting server, a UDP port
number ranging from 1 to 65535. The default setting is 1813.
key [ cipher | simple ] key: Specifies the shared key for secure communication with the primary RADIUS
accounting server.
• cipher key: Specifies a ciphertext shared key, a case-sensitive ciphertext string of 1 to 117
characters.
• simple key: Specifies a plaintext shared key, a case-sensitive string of 1 to 64 characters.
• If neither cipher nor simple is specified, you set a plaintext shared key string.
vpn-instance vpn-instance-name: Specifies the VPN to which the primary RADIUS accounting server
belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the server is
on the public network, do not specify this option.
Usage guidelines
Make sure the port number and shared key settings of the primary RADIUS accounting server are the
same as those configured on the server.
The IP addresses of the accounting servers and those of the authentication/authorization servers must be
of the same IP version.
The IP addresses of the primary and secondary accounting servers must be different from each other.
Otherwise, the configuration fails.
The shared key configured by this command takes precedence over that configured by using the key
accounting [ cipher | simple ] key command.
If the specified server resides on a VPN, specify the VPN by using the vpn-instance vpn-instance-name
option. The VPN specified by this command takes precedence over the VPN specified for the RADIUS
scheme.
If you change the primary accounting server when the device has already sent a start-accounting request
to the server, the communication with the primary server times out, and the device looks for a server in
active state from the new primary server on.