H3C MSR Series

115
Examples
# In RADIUS scheme radius1, set the primary authentication server to the blocked state.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] state primary authentication block
Related commands
display radius scheme
radius-server test-profile
state secondary
state secondary
Use state secondary to set the status of a secondary RADIUS server.
Syntax
state secondary { accounting | authentication } [ { ipv4-address | ipv6 ipv6-address }
[ port-number | vpn-instance vpn-instance-name ] * ] { active | block }
Default
A secondary RADIUS server is in active state.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
accounting: Specifies a secondary RADIUS accounting server.
authentication: Specifies a secondary RADIUS authentication server.
ipv4-address: Specifies the IPv4 address of a secondary RADIUS server.
ipv6 ipv6-address: Specifies the IPv6 address of a secondary RADIUS server.
port-number: Sets the service port number of a secondary RADIUS server. The value range for the
UDP port number is 1 to 65535. The default port numbers for authentication and accounting are
1812 and 1813, respectively.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the secondary
RADIUS server belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31
characters.
active: Specifies the active state, the normal operation state.
block: Specifies the blocked state, the out-of-service state.
Usage guidelines
If you do not specify an IP address, this command changes the status of all configured secondary
RADIUS servers.
If the device finds that a secondary server in active state is unreachable, the device performs the
following operations:
• Changes the status of the secondary server to blocked.
• Starts a quiet timer for the server.
• Tries to communicate with another secondary server in active state.