3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide
Configuring the RADIUS Protocol 39
As the authorization information from the RADIUS server is sent to RADIUS clients
in authentication response packets, so you do not need to specify a separate
authorization server.
In real networking environments, you may specify two RADIUS servers as primary
and secondary authentication/authorization servers respectively, or specify one
server to function as both.
Configuring RADIUS
Accounting Servers and
the Related Attributes
Configuring RADIUS accounting servers
You can use the following commands to configure IP address and port number of
RADIUS accounting servers.
Perform the following configuration in RADIUS view.
In practice, you can specify two RADIUS servers as the primary and the secondary
accounting servers respectively; or specify one server to function as both.
For normal interaction between the NAS and a RADIUS server, you must ensure
the connectivity of the routes between the RADIUS server and the NAS before
configuring the IP address and UDP port of the RADIUS server. In addition, since
RADIUS uses different UDP ports for authentication/authorization and accounting,
you must assign different numbers to the authentication/authorization port and
the accounting port, which are 1812 and 1813 respectively as recommended by
RFC2138/2139. You can assign port numbers different from the two
recommended in the RFC, however. (For example, in the early stage of RADIUS
server implementation, 1645 and 1646 were often assigned to the
Restore IP address and port number of the
primary RADIUS authentication/authorization
server to the default values.
undo primary authentication
Configure IP address and port number of the
secondary RADIUS
authentication/authorization server.
secondary authentication ip-address [
port-number ]
Restore IP address and port number of the
secondary RADIUS
authentication/authorization server to the
default values.
undo secondary authentication
Table 24 Configure IP address and port number of RADIUS authentication/authorization
servers
Operation Command
Tab le 25 Configure IP address and port number of RADIUS accounting servers
Operation Command
Configure IP address and port number of the
primary RADIUS accounting server.
primary accounting ip-address [
port-number ]
Restore the default IP address and port
number of the primary RADIUS accounting
server.
undo primary accounting
Configure IP address and port number of the
secondary RADIUS accounting server.
secondary accounting ip-address [
port-number ]
Restore the default IP address and port
number of the secondary RADIUS accounting
server.
undo secondary accounting