HP MSR2000/3000/4000 Router Series Security Command Reference

46
A RADIUS scheme can have only one source IP address for outgoing RADIUS packets. If you specify a
new source IP address for the same RADIUS scheme, the new address overwrites the old one.
Examples
# Set the source IP address for outgoing RADIUS packets to 10.1.1.1.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] nas-ip 10.1.1.1
Related commands
• display radius scheme
• radius nas-ip
primary accounting (RADIUS scheme view)
Use primary accounting to specify the primary RADIUS accounting server.
Use undo primary accounting to remove the configuration.
Syntax
primary accounting { ipv4-address | ipv6 ipv6-address } [ port-number | key { cipher | simple } string
| vpn-instance vpn-instance-name ] *
undo primary accounting
Default
No primary RADIUS accounting server is specified.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
ipv4-address: Specifies the IPv4 address of the primary RADIUS accounting server.
ipv6 ipv6-address: Specifies the IPv6 address of the primary RADIUS accounting server.
port-number: Specifies the service port number of the primary RADIUS accounting server, a UDP port
number in the range of 1 to 65535. The default setting is 1813.
key { cipher | simple } string: Sets the shared key for secure communication with the primary RADIUS
accounting server.
• cipher string: Sets a ciphertext shared key. The string argument is case sensitive.
{ In non-FIPS mode, the key is a string of 1 to 117 cha ra ct e r s .
{ In FIPS mode, the key is a string of 15 to 117 c h aract e r s .
• simple string: Sets a plaintext shared key. The string argument is case sensitive.
{ In non-FIPS mode, the key is a string of 1 to 64 characters.
{ In FIPS mode, the key is a string of 15 to 64 characters that must contain digits, uppercase letters,
lowercase letters, and special characters.