R3303-HP 6600/HSR6600 Routers Security Command Reference

85
• timer response-timeout
• display stop-accounting-buffer
secondary accounting (RADIUS scheme view)
Use secondary accounting to specify a secondary RADIUS accounting server.
Use undo secondary accounting to remove the configuration.
Syntax
secondary accounting { ipv4-address | ipv6 ipv6-address } [ port-number | key [ cipher | simple ] key
| vpn-instance vpn-instance-name ] *
undo secondary accounting [ ipv4-address | ipv6 ipv6-address ]
Default
No secondary RADIUS accounting server is specified.
Views
RADIUS scheme view
Default command level
2: System level
Parameters
ipv4-address: Specifies the IPv4 address of the secondary RADIUS accounting server.
ipv6 ipv6-address: Specifies the IPv6 address of the secondary RADIUS accounting server, which must
be a valid global unicast address.
port-number: Specifies the service port number of the secondary RADIUS accounting server, which is a
UDP port number ranging from 1 to 65535 and defaults to 1813.
key [ cipher | simple ] key: Specifies the shared key for secure communication with the secondary
RADIUS accounting server. In FIPS mode, the shared key must be a string of at least 8 characters that
contain numbers, uppercase letters, lowercase letters, and special characters, and is encrypted and
decrypted by using 3DES.
• cipher key: Specifies a ciphertext shared key, which is a case-sensitive ciphertext string of 1 to 117
characters.
• simple key: Specifies a plaintext shared key, which is a case-sensitive string of 1 to 64 characters.
• If neither cipher nor simple is specified, you set a plaintext shared key string.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the secondary RADIUS accounting
server belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the
server is on the public network, do not specify this option.
Usage guidelines
Make sure the port number and shared key settings of the secondary RADIUS accounting server are the
same as those configured on the server.
You can configure up to 16 secondary RADIUS accounting servers for a RADIUS scheme. After the
configuration, if the primary server fails, the device looks for a secondary server in active state (a
secondary RADIUS accounting server configured earlier has a higher priority) and tries to communicate
with it.