R3204P16-HP Load Balancing Module Security Command Reference-6PW101

104
By default, no RADIUS scheme is defined.
The RADIUS protocol is configured scheme by scheme. Every RADIUS scheme must at least specify the IP
addresses and UDP ports of the RADIUS authentication/authorization/accounting servers and the
parameters necessary for a RADIUS client to interact with the servers.
A RADIUS scheme can be referenced by more than one ISP domain at the same time.
You cannot remove the RADIUS scheme being used by online users with the undo radius scheme
command.
Related commands: key, retry realtime-accounting, timer realtime-accounting, stop-accounting-buffer
enable, retry stop-accounting, server-type, state, user-name-format, retry, display radius scheme, and
display radius statistics.
Examples
# Create a RADIUS scheme named radius1 and enter RADIUS scheme view.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1]
radius trap
Syntax
radius trap { accounting-server-down | authentication-error-threshold | authentication-server-down }
undo radius trap { accounting-server-down | authentication-error-threshold |
authentication-server-down }
View
System view
Default level
2: System level
Parameters
accounting-server-down: Enables sending of traps upon accounting server failures
authentication-error-threshold: Enables sending of traps upon authentication failures, which are
determined when the ratio of failed request transmission attempts to total transmission attempts reaches
the configured threshold, which is in the range 1% to 100% and defaults to 30%. Currently, this threshold
can only be configured in MIB view.
authentication-server-down: RADIUS trap for authentication servers.
Description
Use the radius trap command to enable the RADIUS trap function.
Use the undo radius trap command to disable the specified function.
By default, the RADIUS trap function is disabled.
With the RADIUS trap function enabled, you can configure a NAS to send corresponding trap messages
in either of the two situations: