3Com 4510G - Setting the Status of RADIUS Servers

1-26
z If you change the type of RADIUS server, the data stream destined to the original RADIUS server
will be restored to the default unit.
z When a third-party RADIUS is used, you can configure the RADIUS server to standard or
extended. When iMC server is used, you must configure the RADIUS server to extended.
Setting the Status of RADIUS Servers
When a primary server fails, the device automatically tries to communicate with the secondary server.
When both the primary and secondary servers are available, the device sends request packets to the
primary server.
Once the primary server fails, the primary server turns into the state of block, and the device turns to
the secondary server. In this case:
z If the secondary server is available, the device triggers the primary server quiet timer. After the
quiet timer times out, the status of the primary server is active again and the status of the
secondary server remains the same.
z If the secondary server fails, the device restores the status of the primary server to active
immediately.
If the primary server has resumed, the device turns to use the primary server and stops communicating
with the secondary server. After accounting starts, the communication between the client and the
secondary server remains unchanged.
Follow these steps to set the status of RADIUS servers:
To do… Use the command… Remarks
Enter system view system-view —
Create a RADIUS scheme and
enter RADIUS scheme view
radius scheme
radius-scheme-name
Required
Not defined by default
Set the status of the primary
RADIUS
authentication/authorization server
state primary authentication
{ active | block }
Set the status of the primary
RADIUS accounting server
state primary accounting { active
| block }
Set the status of the secondary
RADIUS
authentication/authorization server
state secondary authentication
{ active | block }
Set the status of the secondary
RADIUS accounting server
state secondary accounting
{ active | block }
Optional
active for every
server configured with
IP address in the
RADIUS scheme