AAA and RADIUS Protocol Configuration 283
Tab le 318 Setting the Maximum Retransmitting Times of Stopping Accounting Request
By default, the stopping accounting request can be retransmitted up to 500 times.
Enabling the Selection of the Radius Accounting Option
Perform the following configurations in RADIUS Scheme View.
Tab le 319 Enabling the Selection of RADIUS Accounting Option
This command can also be configured in ISP Domain View. For details, refer to
Configuring Relevant Attributes of the ISP Domain.
Setting the RADIUS
Packet Encryption Key
The RADIUS client (Switch system) and the RADIUS server use MD5 algorithm to
encrypt the exchanged packets. The two ends verify the packet through setting
the encryption key. Only when the keys are identical can both ends accept the
packets from each other and give responses.
You can use the following commands to set the encryption key for RADIUS
packets.
Perform the following configurations in RADIUS Scheme View.
Tab le 320 Setting the RADIUS Packet Encryption Key
By default, the keys of RADIUS authentication/authorization and accounting
packets are all “3com”.
Setting Retransmission
Times of RADIUS
Request Packet
Since RADIUS protocol uses UDP packets to carry the data, the communication
process is not reliable. If the RADIUS server has not responded to NAS before
timeout, NAS has to retransmit the RADIUS request packet. If it transmits more
than the specified
retry-times
, NAS considers the communication with the
primary and secondary RADIUS servers has been disconnected.
You can use the following command to set the retransmission times of the RADIUS
request packet.
Perform the following configurations in RADIUS Scheme View.
Operation Command
Set the maximum retransmitting times of stopping
accounting request
retry stop-accounting
retry_times
Restore the maximum retransmitting times of
stopping accounting request to the default value
undo retry
stop-accounting
Operation Command
Enable the selection of RADIUS accounting option accounting optional
Disable the selection of RADIUS accounting option undo accounting optional
Operation Command
Set RADIUS authentication/authorization packet
encryption key
key authentication
string
Restore the default RADIUS
authentication/authorization packet encryption key.
undo key authentication
Set RADIUS accounting packet key key accounting
string
Restore the default RADIUS accounting packet key undo key accounting