R3204P16-HP Load Balancing Module Security Command Reference-6PW101

99
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key accounting ok
nas-ip (RADIUS scheme view)
Syntax
nas-ip ip-address
undo nas-ip
View
RADIUS scheme view
Default level
2: System level
Parameters
ip-address: IPv4 address in dotted decimal notation. It must be an address of the LB module and cannot
be 0.0.0.0, 255.255.255.255, a class D address, a class E address, or a loopback address.
Description
Use the nas-ip command to specify the IP address for the LB module to use as the source address of the
RADIUS packets to be sent to the server.
Use the undo nas-ip command to restore the default.
By default, the source IP address of a packet sent to the server is that configured by the radius nas-ip
command in system view.
Specifying a source address for the RADIUS packets to be sent to the server can avoid the situation where
the packets sent back by the RADIUS server cannot reach the LB module as the result of a physical
interface failure. The address of a loopback interface is recommended.
The nas-ip command in RADIUS scheme view is only for the current RADIUS scheme, while the radius
nas-ip command in system view is for all RADIUS schemes. However, the nas-ip command in RADIUS
scheme view overwrites the configuration of the radius nas-ip command.
The source IP address for outgoing RADIUS packets must be of the same IP version as the IP addresses of
the RADIUS servers in the RADIUS scheme. Otherwise, the source IP address configuration will not take
effect.
You can use the commands to change the setting only when no user is using the RADIUS scheme.
Related commands: radius nas-ip.
Examples
# Set the IP address for the LB module to use as the source address of the RADIUS packets to 10.1.1.1.
<Sysname> system-view
[Sysname] radius scheme test1
[Sysname-radius-test1] nas-ip 10.1.1.1