3com 8807 참조 가이드
348
C
HAPTER
21: AAA
AND
RADIUS/HWTACACS P
ROTOCOL
C
ONFIGURATION
C
OMMANDS
secondary: Configures to set the state of the secondary RADIUS server.
accounting: Configures to set the state of RADIUS accounting server.
authentication: Configures to set the state of RADIUS
authentication/authorization.
authentication/authorization.
block: Configures the RADIUS server to be in the state of block.
active: Configures the RADIUS server to be active, namely the normal operation
state.
state.
Description
Use the state command to configure the state of RADIUS server.
By default, for the RADIUS scheme named "system", which the system creates by
default, the primary RADIUS server is in the state of active, and the secondary
RADIUS server is in the state of block. For a new RADIUS scheme, the RADIUS
server is in the state of block if an IP address is not configured for the server; the
RADIUS server is in the state of active if an IP address is configured for the server.
default, the primary RADIUS server is in the state of active, and the secondary
RADIUS server is in the state of block. For a new RADIUS scheme, the RADIUS
server is in the state of block if an IP address is not configured for the server; the
RADIUS server is in the state of active if an IP address is configured for the server.
For the primary and secondary servers (no matter an authentication/authorization
or an accounting server), if the primary server is disconnected to NAS for some
fault, NAS will automatically turn to exchange packets with the secondary server.
However, after the primary one recovers, NAS will not resume the communication
with it at once, instead, it continues communicating with the secondary one.
When the secondary one fails to communicate, NAS will turn to the primary one
again. This command is used to set the primary server to be active manually, in
order that NAS can communicate with it right after the troubleshooting.
or an accounting server), if the primary server is disconnected to NAS for some
fault, NAS will automatically turn to exchange packets with the secondary server.
However, after the primary one recovers, NAS will not resume the communication
with it at once, instead, it continues communicating with the secondary one.
When the secondary one fails to communicate, NAS will turn to the primary one
again. This command is used to set the primary server to be active manually, in
order that NAS can communicate with it right after the troubleshooting.
When the primary and secondary servers are all active or block, NAS first sends
the packets to the primary server. If NAS fails to connect the primary servers, it
sends the packets to the secondary server.
the packets to the primary server. If NAS fails to connect the primary servers, it
sends the packets to the secondary server.
Related command: radius scheme, primary authentication, secondary
authentication, primary accounting, secondary accounting.
authentication, primary accounting, secondary accounting.
Example
# Set the secondary authentication server of RADIUS scheme, "3com", to be
Active.
Active.
[3Com-radius-3com] state secondary authentication active
stop-accounting-buffer
enable
Syntax
stop-accounting-buffer enable
undo stop-accounting-buffer enable
View
RADIUS scheme view
Parameter
None