62
Default
The source IP address of an outgoing RADIUS packet is the IP address of the outbound interface.
Views
System view
Predefined user roles
network-admin
Parameters
ipv4-address: Specifies an IPv4 address, which must be an address of the device. The IP address cannot
be 0.0.0.0, 255.255.255.255, a class D address, a class E address, or a loopback address.
ipv6 ipv6-address: Specifies an IPv6 address, which must be a unicast address of the device. The IP
address cannot be a loopback address or a link-local address.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the source IPv4 or IPv6 address
belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters. To configure a
public-network source IPv4 or IPv6 address, do not specify this option.
Usage guidelines
The source IP address of RADIUS packets that a NAS sends must match the IP address of the NAS that
is configured on the RADIUS server. A RADIUS server identifies a NAS by its IP address. Upon receiving
a RADIUS packet, a RADIUS server checks whether the source IP address of the packet is the IP address
of a managed NAS.
• If the source IP address of the packet is the IP address of a managed NAS, the server processes the
packet.
• If the source IP address of the packet is not the IP address of a managed NAS, the server drops the
packet.
If no source IP address is specified for outgoing RADIUS packets, packets returned from the server cannot
reach the device due to a physical port error.
You can specify up to 16 source IP addresses, including the following:
• Zero or one public-network source IPv4 address.
• Zero or one public-network source IPv6 address.
• Private-network source IP addresses.
A newly specified public-network source IP address overwrites the previous one. Each VPN can have at
most one private-network source IPv4 address and one private-network source IPv6 address.
When you use both the nas-ip command and radius nas-ip command, the following guidelines apply:
• The setting configured by the nas-ip command in RADIUS scheme view is only for the RADIUS
scheme.
• The setting configured by the radius nas-ip command in system view is for all RADIUS schemes.
• The setting in RADIUS scheme view takes precedence over the setting in system view.
Examples
# Set the IP address for the device to use as the source address of the RADIUS packets to 129.10.10.1.
<Sysname> system-view
[Sysname] radius nas-ip 129.10.10.1