3Com Switch 8800 Family Firewall Module Configuration and Command Reference Guide

244 CHAPTER 15: AAA/RADIUS/HWTACACS CONFIGURATION COMMANDS
Example
# Set the IP address of the primary accounting server in the RADIUS scheme
"3com" to 10.110.1.2 and use the UDP port 1813 to provide the RADIUS
accounting service.
[SecBlade_FW-radius-3com] primary accounting 10.110.1.2 1813
primary authentication Syntax
primary authentication ip-address [ port-number ]
undo primary authentication
View
RADIUS view
Parameter
ip-address: IP address in dotted decimal format. By default, in system scheme, the
IP address of the primary authentication/authorization server is 127.0.0.1; in the
newly added RADIUS scheme, the IP address of the primary
authentication/authorization server is 0.0.0.0.
port-number: UDP port number of the primary authentication/authorization
server, which is ranging from 1 to 65535. By default, in system scheme, the UDP
port of the primary authentication/authorization server is 1645; in the newly
added RADIUS scheme, the UDP port of the primary authentication/authorization
server is 1812.
Description
Use the primary authentication command to configure IP address and port
number of the primary RADIUS authentication/authorization server.
Use the undo primary authentication command to restore the default IP
address and port number of the primary RADIUS authentication/authorization
server.
After creating a RADIUS scheme, you are supposed to configure IP address and
UDP port of each RADIUS server (primary/secondary authentication/authorization
or accounting server). The configuration of RADIUS servers is at your discretion
except that there must be at least one authentication/authorization server and one
accounting server. Besides, ensure that the RADIUS service port settings on the
security gateway are consistent with the port settings on the RADIUS servers.
Related command: key, radius scheme, and state.
Example
# Set IP address of the primary authentication/authorization server in the RADIUS
scheme "3com" to 10.110.1.1 and use the UDP port 1812 to provide the RADIUS
authentication/authorization service.
[SecBlade_FW-radius-3com] primary authentication 10.110.1.1 1812