3Com Switch 8800 Advanced Software V5 Configuration Guide

Configuring RADIUS 899
Configuring the RADIUS
Accounting Servers and
Relevant Parameters
Follow these steps to specify the RADIUS accounting servers and perform related
configurations:
n
■ In practice, you can specify two RADIUS servers as the primary and secondary
accounting servers respectively; or specify one server to function as both.
Besides, since RADIUS uses different UDP ports to receive
authentication/authorization and accounting packets, the port for
authentication/authorization must be different from that for accounting.
■ You can set the maximum number of stop-accounting request transmission
buffer, allowing the device to buffer and resend a stop-accounting request
until it receives a response or the number of transmission retries reaches the
configured limit. In the latter case, the device discards the packet.
■ You can set the maximum number of accounting request transmission
attempts on the device, allowing the device to disconnect a user when the
number of accounting request transmission attempts for the user reaches the
limit but it still receives no response to the accounting request.
■ The IP addresses of the primary and secondary accounting servers cannot be
the same. Otherwise, the configuration fails.
■ In the default RADIUS scheme system, the IP address and port of the primary
accounting server are respectively 127.0.0.1 and 1646.
■ Currently, neither RADIUS nor HWTACACS supports keeping accounts on FTP
users.
To do... Use the command... Remarks
Enter system view system-view -
Create a RADIUS scheme and
enter RADIUS scheme view
radius scheme
radius-scheme-name
Required
By default, the system has
created a RADIUS scheme
named "system".
Configure the IP address and
UDP port of the primary
RADIUS accounting server
primary accounting
ip-address [ port-number ]
Required
The defaults are as follows:
0.0.0.0 for the IP address, and
1813 for the port.
Configure the IP address and
UDP port of the secondary
RADIUS accounting server
secondary accounting
ip-address [ port-number ]
Optional
The defaults are as follows:
0.0.0.0 for the IP address, and
1813 for the port.
Enable the device to buffer
stop-accounting requests
getting no responses
stop-accounting-buffer
enable
Optional
Enabled by default
Set the maximum number of
stop-accounting request
transmission attempts
retry stop-accounting
retry-times
Optional
500 by default
Set the maximum number of
accounting request
transmission attempts
retry realtime-accounting
retry-times
Optional
5 by default