HP 6125G HP 6125G & 6125G/XG Blade Switches Security Command Reference - Page 57
For RADIUS scheme, cipher, simple, vpn-instance, primary accounting, accounting, radius1, hello
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 57 highlights
ipv6 ipv6-address: Specifies the IPv6 address of the primary accounting server. port-number: Specifies the service port number of the primary RADIUS accounting server, which is a UDP port number in the range of 1 to 65535 and defaults to 1813. key [ cipher | simple ] key: Sets the shared key for secure communication with the primary RADIUS accounting server. • cipher key: Sets a ciphertext shared key, which is a case-sensitive ciphertext string of 1 to 117 characters. • simple key: Sets a plaintext shared key, which is a case-sensitive string of 1 to 64 characters. • If neither cipher nor simple is specified, you set a plaintext shared key string. vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the primary RADIUS accounting server belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the server is on the public network, do not specify this option. Description Use primary accounting to specify the primary RADIUS accounting server. Use undo primary accounting to remove the configuration. By default, no primary RADIUS accounting server is specified. Make sure the port number and shared key settings of the primary RADIUS accounting server are the same as those configured on the server. The IP addresses of the accounting servers and those of the authentication/authorization servers must be of the same IP version. The IP addresses of the primary and secondary accounting servers must be different from each other and use the same IP version. Otherwise, the configuration fails. The shared key configured by this command takes precedence over that configured by using the key accounting [ cipher | simple ] key command. If the specified server resides on an MPLS L3VPN, specify the VPN by using the vpn-instance vpn-instance-name option. The VPN specified by this command takes precedence over the VPN specified for the RADIUS scheme. If you change the primary accounting server when the switch has already sent a start-accounting request to the server, the communication with the primary server times out, and the switch looks for a server in active state from the new primary server on. If you remove an accounting server being used by users, the switch no longer sends real-time accounting or stop-accounting requests for the users, and does not buffer the stop-accounting requests. For secrecy, all shared keys, including shared keys configured in plain text, are saved in cipher text. Related commands: key and vpn-instance (RADIUS scheme view). Examples # For RADIUS scheme radius1, set the IP address of the primary accounting server to 10.110.1.2, the UDP port to 1813, and the shared key to hello in plain text. system-view [Sysname] radius scheme radius1 [Sysname-radius-radius1] primary accounting 10.110.1.2 1813 key simple hello 48