R0106-HP MSR Router Series Security Command Reference(V7)

72
Related commands
• display radius scheme
• radius-server test-profile
• state secondary
state secondary
Use state secondary to set the status of a secondary RADIUS server.
Syntax
state secondary { accounting | authentication } [ ip-address [ port-number | vpn-instance
vpn-instance-name ] * ] { active | block }
Default
Every secondary RADIUS server specified in a RADIUS scheme is in active state.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
accounting: Sets the status of a secondary RADIUS accounting server.
authentication: Sets the status of a secondary RADIUS authentication server.
ip-address: Specifies the IPv4 address of a secondary RADIUS server.
port-number: Specifies the service port number of a secondary RADIUS server. The value range for the
UDP port number is 1 to 65535. The default authentication and accounting port numbers are 1812
and1813, respectively.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the secondary RADIUS server
belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters.
active: Specifies the active state, the normal operation state.
block: Specifies the blocked state, the out-of-service state.
Usage guidelines
If you do not specify an IP address, this command changes the status of all configured secondary
RADIUS servers.
If the device finds that a secondary server in active state is unreachable, the device performs the
following tasks:
• Changes the status of the secondary server to blocked.
• Starts a quiet timer for the server.
• Tries to communicate with another secondary server in active state.
When the quiet timer of a server times out, the status of the server automatically changes to active. If you
set the status of the server to blocked before the quiet timer times out, the status of the server cannot
change back to active unless you manually set the status to active. If all configured secondary servers are
unreachable, the device considers the authentication or accounting attempt a failure.