R211x-HP Flexfabric 11900 Security Command Reference

56
• RADIUS server unreachable notification—The RADIUS server cannot be reached. RADIUS
generates this notification if it cannot receive any response to an accounting or authentication
request within the specified RADIUS request transmission attempts.
• RADIUS server reachable notification—The RADIUS server can be reached. RADIUS generates this
notification for a previously blocked RADIUS server after the quiet timer expires.
• Excessive authentication failures notification—The number of authentication failures to the total
number of authentication attempts exceeds the specified threshold.
Examples
# Enable the SNMP agent to send RADIUS accounting server unreachable notifications.
<Sysname> system-view
[Sysname] snmp-agent trap enable radius accounting-server-down
state primary
Use state primary to set the status of a primary RADIUS server.
Syntax
state primary { accounting | authentication } { active | block }
Default
The primary RADIUS server specified for a RADIUS scheme is in active state.
Views
RADIUS scheme view
Predefined user roles
network-admin
mdc-admin
Parameters
accounting: Sets the status of the primary RADIUS accounting server.
authentication: Sets the status of the primary RADIUS authentication server.
active: Specifies the active state, the normal operation state.
block: Specifies the blocked state, the out-of-service state.
Usage guidelines
During an authentication or accounting process, the device first tries to communicate with the primary
server if the primary server is in active state. If the primary server is unavailable, the device does the
following:
• Changes the status of the primary server to blocked.
• Starts a quiet timer for the server.
• Tries to communicate with a secondary server in active state.
When the quiet timer of the primary server times out, the status of the server automatically changes to
active. If you set the status of the server to blocked before the quiet timer times out, the status of the server
cannot change back to active unless you manually set the status to active.
When the primary server and all secondary servers are in blocked state, authentication or accounting
fails.