53
Use the undo radius client command to disable the listening port of the RADIUS client.
By default, the listening port is enabled.
When the listening port of the RADIUS client is disabled:
ï‚· The RADIUS client can either accept authentication, authorization or accounting requests or process
timer messages. However, it fails to transmit and receive packets to and from the RADIUS server.
ï‚· The end account packets of online users cannot be sent out and buffered. This may cause a problem
that the RADIUS server still has the user record after a user goes offline for a period of time.
ï‚· The authentication, authorization and accounting turn to the local scheme after the RADIUS request
fails if the RADIUS scheme and the local authentication, authorization and accounting scheme are
configured.
ï‚· The buffered accounting packets cannot be sent out and will be deleted from the buffer when the
configured maximum number of attempts is reached.
Examples
# Enable the listening port of the RADIUS client.
<Sysname> system-view
[Sysname] radius client enable
radius nas-backup-ip (available only on the A5500 EI)
Syntax
radius nas-backup-ip ip-address [ vpn-instance vpn-instance-name ]
undo radius nas-backup-ip
View
System view
Default level
2: System level
Parameters
ip-address: Backup source IP address for RADIUS packets. It must be the source IP address for outgoing
RADIUS packets that is configured on the backup device for stateful failover and cannot be 0.0.0.0,
255.255.255.255, a class D address, a class E address, or a loopback address.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN that the backup source IP address belongs to.
vpn-instance-name is a case-sensitive string of 1 to 31 characters. With a VPN specified, the command
specifies a private-network backup source IP address. With no VPN specified, the command specifies a
public-network backup source IP address.
Description
Use the radius nas-backup-ip command to specify a backup source IP address for outgoing RADIUS
packets.
Use the undo radius nas-backup-ip command to restore the default.
By default, a device is configured with no backup source IP address for outgoing RADIUS packets.
With a backup source IP address configured for outgoing RADIUS packets, a device for stateful failover
sends this address to the RADIUS server if it is the active device. When the active device fails, the
RADIUS server can send unsolicited RADIUS packets to the backup device.
To Next Page
Loading...
Need help?
General
