Operation Manual - Security
Quidway S3500 Series Ethernet Switches Chapter 3 AAA and RADIUS Protocol Configuration
Huawei Technologies Proprietary
3-18
By default, the newly created RADIUS scheme supports the server of standard type,
while the "system" RADIUS scheme created by the system supports the server of
huawei type.
3.3.13 Setting RADIUS Server State
For the primary and second servers (no matter it is an authentication/authorization
server or accounting server), if the primary is disconnected to NAS for some fault, NAS
will automatically turn to exchange packets with the second server. However, after the
primary one recovers, NAS will not resume the communication with it at once, instead,
it continues communicating with the second one. When the second one fails to
communicate, NAS will turn to the primary one again. The following commands can be
used to set the primary server to be active manually, in order that NAS can
communicate with it right after the troubleshooting.
When the primary and second servers are both active or block, NAS will send the
packets to the primary server only.
Perform the following configurations in RADIUS scheme view.
Table 3-22 Setting RADIUS server state
Operation Command
Set the state of primary RADIUS
server
state primary { accounting |
authentication } { block | active }
Set the state of second RADIUS
server
state secondary{ accounting |
authentication } { block | active }
By default, the state of each server in RADIUS scheme is active.
3.3.14 Configuring the Quiet Time Interval
 Note:
Among S3500 series ethernet switches, S3552G, S3552P, S3528G, S3528P, S3526E,
S3526E FM, S3526E FS and S3526C support this function, and S3526, S3526 FM and
S3526 FS don’t.
The following commands can be used for setting the quiet time interval after which the
primary and secondary RADIUS servers switch over. The functions of the quiet time
interval are as follows:
z The switch sends RADIUS packets to the primary RADIUS server.
To Next Page
Loading...
Need help?
General
