Table of Contents
Advertisement
The IP addresses of the primary and secondary accounting servers must be different from each other.
Otherwise, the configuration fails.
If you remove a secondary accounting server when the device has already sent a start-accounting
request to the server, the communication with the secondary server will time out, and the device will look
for a server in active state from the primary server on.
If you remove an accounting server being used by online users, the device cannot send real-time
accounting requests and stop-accounting requests anymore for the users, and does not buffer the
stop-accounting requests.
NOTE:
The shared key configured by this command takes precedence over that configured by using the key
accounting
Related commands: key and state.
Examples
# For RADIUS scheme radius1, set the IP address of the secondary accounting server to 10.1 10.1.1, the
UDP port to 1813.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] secondary accounting 10.110.1.1 1813
# For RADIUS scheme radius2, specify two secondary accounting servers with the server IP addresses of
10.1 10.1.1 and 10.1 10.1.2 and the UDP port number of 1813.
<Sysname> system-view
[Sysname] radius scheme radius2
[Sysname-radius-radius2] secondary accounting 10.110.1.1 1813
[Sysname-radius-radius2] secondary accounting 10.110.1.2 1813
secondary authentication (RADIUS scheme view)
Syntax
secondary authentication ipv4-address [ port-number ]
undo secondary authentication
View
RADIUS scheme view
Default level
2: System level
Parameters
ipv4-address: IPv4 address of the secondary authentication/authorization server.
port-number: Service port number of the secondary authentication/authorization server, a UDP port
number in the range 1 to 65535. The default is 1812.
Description
Use the secondary authentication command to specify secondary RADIUS authentication/authorization
servers for a RADIUS scheme.
key
command..
111
Advertisement
Table of Contents
