HP 6125G HP 6125G & 6125G/XG Blade Switches Security Command Reference - Page 58

primary authentication (RADIUS scheme view) Syntax primary authentication { ipv4-address | ipv6 ipv6-address } [ port-number | key [ cipher | simple ] key | probe username name [ interval interval ] | vpn-instance vpn-instance-name ] * View undo primary authentication RADIUS scheme view Default level 2: System level Parameters ipv4-address: Specifies the IPv4 address of the primary authentication/authorization server. ipv6 ipv6-address: Specifies the IPv6 address of the primary authentication/authorization server. port-number: Specifies the service port number of the primary RADIUS authentication/authorization server, which is a UDP port number in the range of 1 to 65535 and defaults to 1812. key [ cipher | simple ] key: Sets the shared key for secure communication with the primary RADIUS authentication/authorization server. • cipher key: Sets a ciphertext shared key, which is a case-sensitive ciphertext string of 1 to 117 characters. • simple key: Sets a plaintext shared key, which is a case-sensitive string of 1 to 64 characters. • If neither cipher nor simple is specified, you set a plaintext shared key string. probe username: Enables the switch to detect the status of the primary RADIUS authentication/authorization server. username name: Specifies the username in the authentication request that is used to detect the status of the primary RADIUS authentication/authorization server. interval interval: Specifies the interval between two server status detections. The value ranges from 1 to 3600 and defaults to 60, in minutes. vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the primary RADIUS authentication/authorization server belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the server is on the public network, do not specify this option. Description Use primary authentication to specify the primary RADIUS authentication/authorization server. Use undo primary authentication to remove the configuration. By default, no primary RADIUS authentication/authorization server is specified. Make sure the port number and shared key settings of the primary RADIUS accounting server are the same as those configured on the server. The IP addresses of the authentication/authorization servers and those of the accounting servers must be of the same IP version. The IP addresses of the primary and secondary authentication/authorization servers must be different from each other and use the same IP version. Otherwise, the configuration fails. 49