316
Table 148 Configuration items
Item Description
Server Type
Select the type of the RADIUS server to be configured. Possible values include
primary authentication server, primary accounting server, secondary
authentication server, and secondary accounting server.
IP Address
Specify the IPv4 or IPv6 address of the RADIUS server.
The IP addresses of the primary and secondary servers for a scheme must be
different. Otherwise, the configuration fails.
RADIUS server addresses in the same scheme must use the same IP version.
Port Specify the UDP port of the RADIUS server.
Key
Confirm Key
Specify the shared key for communication with the RADIUS server.
If no shared key is specified, the shared key specified in the common
configuration part is used.
VPN
Specify the VPN to which the RADIUS server belongs.
If no VPN is specified, the VPN specified in the common configuration part is
used.
RADIUS configuration example
Network requirements
• As shown in Figure 330, connect the Telnet user to the router and the router to the RADIUS
server.
• Run the RADIUS server on CAMS or IMC to provide authentication, authorization, and
accounting services for Telnet users. The IP address of the RADIUS server is 10.1.1.1/24.
• Set the shared key for AAA packets exchanged between the router and the RADIUS server to
expert, and specify the ports for authentication/authorization and accounting as 1812 and 1813,
respectively.
• Configure the router to send the RADIUS server usernames that carry domain names.
• Add an account on the RADIUS server, with the username and password being hello@bbb
and abc. If the user passes authentication, it is assigned a privilege level of 3.
Figure 330 Network diagram
Configuring the RADIUS server on CAMS
This example assumes that the RADIUS server runs on CAMS Server Version 2.10-R0210.
1. Add the router to CAMS as an access device: