Switch 7700 Command reference Guide, v2.0

378 CHAPTER 9: USING AAA AND RADIUS COMMANDS
Description
■ Use the local-server command to configure the parameters of local RADIUS
server.
■ Use the undo local-server command to cancel a local RADIUS server.
RADIUS service, which adopts authentication/authorization/accounting servers to
manage users, is widely used in SW7700 switches. Besides, local
authentication/authorization/accounting service is also used in these products and
it is called local RADIUS function, i.e. realize basic RADIUS function on the switch.
Note that when using local RADIUS server function, remember the number of UDP
port used for authentication is 1645 and that for accounting is 1646.
SW7700 switches support up to 16 local RADIUS server groups.
Related commands: radius scheme, state.
Example
Set the IP address of local RADIUS server group to 10.110.1.2 and the password to
3Com.
[SW7700]local-server nas-ip 10.110.1.2 key 3Com
primary accounting Syntax
primary accounting ip-address [ port-number ]
undo primary accounting
View
RADIUS server group view
Parameter
ip-address: IP address, in dotted decimal format. By default, the IP addresses of
the primary accounting servers is at 0.0.0.0.
port-number: Specifies UDP port number. ranging from 1 to 65535. By default,
the UDP port for accounting service is 1813.
Description
■ Use the primary accounting command to configure the IP address and port
number for the primary accounting server.
■ Use the undo primary accounting command to restore the default IP address
and port number of the primary RADIUS accounting server.
After creating a RADIUS server group, you are supposed to set IP addresses and
UDP port numbers for the RADIUS servers, including primary/second
authentication/authorization servers and accounting servers. In real networking
environments, the above parameters shall be set according to the specific
requirements. However, at least you have to set one authentication/authorization
server and an accounting server. Besides, ensure that the RADIUS service port
settings on the Ethernet switch is consistent with the port settings on the RADIUS
server.