R0106-HP MSR Router Series Security Command Reference(V7)

57
If you remove an actively used accounting server, the device no longer sends users' real-time accounting
requests and stop-accounting requests. The device does not buffer the stop-accounting requests, either.
The device can generate incorrect accounting results.
For security purposes, all shared keys, including shared keys configured in plain text, are saved in
ciphertext.
Examples
# Specify the primary accounting server with IP address 10.110.1.2, UDP port number 1813, and plaintext
shared key 123456TESTacct&! for RADIUS scheme radius1.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary accounting 10.110.1.2 1813 key simple 123456TESTacct&!
Related commands
• display radius scheme
• key (RADIUS scheme view)
• secondary accounting (RADIUS scheme view)
• vpn-instance (RADIUS scheme view)
primary authentication (RADIUS scheme view)
Use primary authentication to specify the primary RADIUS authentication server.
Use undo primary authentication to remove the configuration.
Syntax
primary authentication { ipv4-address | ipv6 ipv6-address } [ port-number | key { cipher | simple }
string | test-profile profile-name | vpn-instance vpn-instance-name ] *
undo primary authentication
Default
No primary RADIUS authentication server is specified.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
ipv4-address: Specifies the IPv4 address of the primary RADIUS authentication server.
ipv6 ipv6-address: Specifies the IPv6 address of the primary RADIUS authentication server.
port-number: Specifies the service port number of the primary RADIUS authentication server. The value
range for the UDP port number is 1 to 65535, and the default setting is 1812.
key { cipher | simple } string: Sets the shared key for secure communication with the primary RADIUS
authentication server.
• cipher string: Sets a ciphertext shared key. The string argument is case sensitive.
{ In non-FIPS mode, the key is a string of 1 to 117 cha r a c t e rs.
{ In FIPS mode, the key is a string of 15 to 117 c h arac t e r s .