R0106-HP MSR Router Series Security Command Reference(V7)

47
Usage guidelines
Configure the device to interpret the RADIUS class attribute if the RADIUS server uses the attribute to
deliver CAR parameters for user-based traffic monitoring and control.
Examples
# Enter the view of RADIUS scheme test, and configure the device to interpret the RADIUS class attribute
as CAR parameters.
<Sysname> system-view
[Sysname] radius scheme test
[Sysname-radius-test] attribute 25 car
Related commands
display radius scheme
client
Use client to specify a RADIUS DAE client.
Use undo client to remove the specified RADIUS DAE client.
Syntax
client { ip ipv4-address | ipv6 ipv6-address } [ key { cipher | simple } string | vpn-instance
vpn-instance-name ] *
undo client { ip ipv4-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ]
Default
No RADIUS DAE client is specified.
Views
RADIUS DAE server view
Predefined user roles
network-admin
Parameters
ip ipv4-address: Specifies a DAE client by its IPv4 address.
ipv6 ipv6-address: Specifies a DAE client by its IPv6 address.
key { cipher | simple } string: Sets the shared key for secure communication between the RADIUS DAE
client and server. Make sure the shared key is the same as the key configured on the RADIUS DAE client.
If the RADIUS DAE client does not have any shared key, do not specify this option.
• cipher string: Sets a ciphertext shared key. The string argument is a case-sensitive string of 1 to 117
characters.
• simple string: Sets a plaintext shared key. The string argument is a case-sensitive string of 1 to 64
characters.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the RADIUS DAE client belongs,
where vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the server is on the public
network, do not specify this option.
Usage guidelines
The device discards DAE packets sent from DAE clients that are not specified for the DAE server.