286 CHAPTER 11: 802.1X CONFIGURATION
By default, the IP address of the local RADIUS authentication server is 127.0.0.1
and the password is 3com.
1) When using local RADIUS authentication server function of 3com, remember
the number of the UDP port used for authentication is 1645 and that for
accounting is 1646.
2) The password configured by this command must be the same as that of the
RADIUS authentication/authorization packet configured by the command
key
authentication
in RADIUS Scheme View.
Configuring Source
Address for RADIUS
Packets Sent by NAS
Perform the following configurations in the corresponding view.
Table 327 Configuring Source Address for the RADIUS Packets sent by the NAS
You can use either command to bind a source address with the NAS.
By default, no source address is specified and the source address of a packet is the
address of the interface to where it is sent.
Setting the Timers of the
RADIUS Server
Setting the Response Timeout Timer of the RADIUS Server
After RADIUS (authentication/authorization or accounting) request packet has
been transmitted for a period of time, if NAS has not received the response from
the RADIUS server, it has to retransmit the request to guarantee RADIUS service for
the user.
You can use the following command to set response timeout timer of RADIUS
server.
Perform the following configurations in RADIUS Scheme View.
Table 328 Setting the Response Timeout Timer of the RADIUS Server
By default, timeout timer of RADIUS server is 3 seconds.
Setting a Real-time Accounting Interval
To implement real-time accounting, it is necessary to set a real-time accounting
interval. After the attribute is set, NAS will transmit the accounting information of
online users to the RADIUS server regularly.
Operation Command
Configure the source address to be carried in the RADIUS
packets sent by the NAS(RADIUS scheme view).
nas-ip
ip_address
Cancel the configured source address to be carried in the
RADIUS packets sent by the NAS(RADIUS sheme view).
undo nas-ip
Configure the source address to be carried in the RADIUS
packets sent by the NAS(System view).
radius nas-ip
ip_address
Cancel the configured source address to be carried in the
RADIUS packets sent by the NAS(System view).
undo radius nas-ip
Operation Command
Set response timeout timer of RADIUS server timer
second
Restore the response timeout timer of RADIUS server to default value undo timer
To Next Page