Manualshelf

H3C S7500 Series Ethernet Switches Command Manual

ManualsBrandsHP ManualsComputer AccessoriesHP ProCurve 8116fl Redundant Switch Fabric Module
631632633634635636637638639640
Table Of Contents
Command Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-36
Examples
# Set the IP address and UDP port number of the primary accounting server of the
RADIUS scheme radius1 to 10.110.1.2 and 1813.
<H3C>system-view
System View: return to User View with Ctrl+Z.
[H3C] radius scheme radius1
[H3C-radius-radius1] primary accounting 10.110.1.2 1813
1.2.12 primary authentication
Syntax
primary authentication ip-address [ port-number ]
undo primary authentication
View
RADIUS scheme view
Parameters
ip-address: IP address, in dotted decimal notation.
port-number: UDP port number, ranging from 1 to 65,535.
Description
Use the primary authentication command to set the IP address and port number of
the primary RADIUS authentication/authorization server.
Use the undo primary authentication command to restore the default IP address and
port number of the primary RADIUS authentication/authorization server.
The IP address and UDP port number of the primary authentication server used by the
default RADIUS scheme system are 127.0.0.1 and 1645. The IP address and UDP
port number of the secondary authentication server is 0.0.0.0 and 1812. The IP address
and the UDP port number of the primary/secondary authentication server used by a
newly created RADIUS scheme are 0.0.0.0 and 1812.
After creating a new RADIUS scheme, you should configure the IP address and UDP
port number of each RADIUS server you want to use in this scheme. These RADIUS
servers fall into two types: authentication/authorization, and accounting. And for each
kind of server, you can configure two servers in a RADIUS scheme: primary and
secondary servers.
In an actual network environment, you can configure the above parameters as required.
But you should configure at least one authentication/authorization server and one
accounting server. At the same time, you should keep the RADIUS service port settings
on the switch consistent with those on the RADIUS servers.