HPE FlexNetwork 5510 HI Series Security Configuration Guide

26
Step
Command
Remarks
{ host-name | ipv4-address | ipv6
ipv6-address } [ port-number | key
{ cipher | simple } string |
vpn-instance vpn-instance-name
| weight weight-value ] *
sharing feature is enabled for
the RADIUS scheme.
The
weight
weight-value
option is available in Release
1121 and later.
4. (Optional.) Set the maximum
number of realtime
accounting attempts.
retry realtime-accounting
retry-times The default setting is 5.
Specifying the shared keys for secure RADIUS communication
The RADIUS client and server use the MD5 algorithm and shared keys to generate the Authenticator
value for packet authentication and user password encryption. The client and server must use the
same key for each type of communication.
A key configured in this task is for all servers of the same type (accounting or authentication) in the
scheme. The key has a lower priority than a key configured individually for a RADIUS server.
To specify a shared key for secure RADIUS communication:
Step
Command
Remarks
1. Enter system view.
system-view
N/A
2. Enter RADIUS scheme view.
radius scheme
radius-scheme-name
N/A
3. Specify
a shared key for
secure RADIUS
communication.
key
{
accounting
|
authentication
} {
cipher
|
simple
} string
By default
, no shared key is
specified.
The shared key configured on the
device must be the same as the
shared key configure
d on the
RADIUS server.
Specifying a VPN for the scheme
The VPN specified for a RADIUS scheme applies to all authentication and accounting servers in that
scheme. If a VPN is also configured for an individual RADIUS server, the VPN specified for the
RADIUS scheme does not take effect on that server.
To specify a VPN for a scheme:
Step
Command
Remarks
1. Enter system view.
system-view
N/A
2. Enter RADIUS scheme view.
radius scheme
radius-scheme-name
N/A
3. Specify a VPN for the RADIUS
scheme.
vpn-instance
vpn-instance-name
By default, a RADIUS
scheme belongs to the public
network.
Setting the username format and traffic statistics units
A username is in the userid@isp-name format, where the isp-name argument represents the user's
ISP domain name. By default, the ISP domain name is included in a username. However, older
RADIUS servers might not recognize usernames that contain the ISP domain names. In this case,
you can configure the device to remove the domain name of each username to be sent.
If two or more ISP domains use the same RADIUS scheme, configure the RADIUS scheme to keep
the ISP domain name in usernames for domain identification.

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English