66
Examples
# Set the status of the primary server in RADIUS scheme radius1 to blocked.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] state primary authentication block
state secondary
Syntax
state secondary { accounting | authentication } [ ip ipv4-address | ipv6 ipv6-address ] { active | block }
View
RADIUS scheme view
Default level
2: System level
Parameters
accounting: Sets the status of the secondary RADIUS accounting server.
authentication: Sets the status of the secondary RADIUS authentication/authorization server.
ip ipv4-address: Specifies the IPv4 address of the secondary RADIUS server.
ipv6 ipv6-address: Specifies the IPv6 address of the secondary RADIUS server.
active: Specifies the active state, the normal operation state.
block: specifies the blocked state, the out-of-service state.
Description
Use the state secondary command to set the status of a secondary RADIUS server.
By default, every secondary RADIUS server specified in a RADIUS scheme is in the active state.
If no IP address is specified, this command changes the status of all configured secondary servers for
authentication/authorization or accounting.
If the device finds that a secondary server in the active state is unreachable, the device changes the status
of the secondary server to blocked, starts a quiet timer for the server, and continues to try to communicate
with the next secondary server in the active state (a secondary RADIUS server configured earlier has a
higher priority). When the quiet timer of a server times out, the status of the server changes to active
automatically. If you set the status of the server to blocked before the quiet timer times out, the status of
the server cannot change back to active automatically unless you set the status to active manually. If all
configured secondary servers are unreachable, the device considers the authentication or accounting
attempt a failure.
Related commands: display radius and state primary.
Examples
# Set the status of all the secondary servers in RADIUS scheme radius1 to blocked.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] state secondary authentication block
To Next Page
Loading...
Need help?
General
