280 CHAPTER 9: AAA AND RADIUS OPERATION
■ Setting the Maximum Retransmitting Times of the Stop Accounting Request
■ Setting the Supported Type of RADIUS Server
■ Setting RADIUS Server State
■ Setting Username Format Transmitted to RADIUS Server
■ Setting the Unit of Data Flow that Transmitted to RADIUS Server
■ Configuring a Local RADIUS Server Group
■ Displaying and Debugging the AAA and RADIUS Protocols
■ Configuring FTP/Telnet User Authentication at Remote RADIUS Server
■ Configuring FTP/Telnet User Authentication at the Local RADIUS Server
Among the above tasks, creating RADIUS server group, and setting IP address of
the RADIUS server are required, while other takes are optional and can be
performed per your requirements.
Creating/Deleting a RADIUS Server Group
As mentioned above, RADIUS protocol configurations are performed on the per
RADIUS server group basis. Therefore, before performing other RADIUS protocol
configurations, it is compulsory to create the RADIUS server group and enter its
view to set its IP address.
You can use the following commands to create/delete a RADIUS server group.
Perform the following configurations in system view.
Several ISP domains can use a RADIUS server group at the same time.
By default, the system has a RADIUS server group named system whose attributes
are all default values. The default attribute values are introduced in the following
section.
Setting the IP Address and Port Number of RADIUS Server
After creating a RADIUS server group, you set IP addresses and UDP port numbers
for the RADIUS servers, including primary/second authentication/authorization
servers and accounting servers. You can configure up to 4 groups of IP addresses
and UDP port numbers. However, you have to set one group of IP address’ and
UDP port numbers for each pair of primary/second servers to ensure the normal
AAA operation.
Table 19 Create/Delete a RADIUS Server Group
Operation Command
Create a RADIUS server group and enter its
view
radius scheme radius-server-name
Delete a RADIUS server group undo radius scheme radius-server-name
