< Home

display radius-server configuration

Function

The display radius-server configuration command displays configuration information about a RADIUS server template.

Format

display radius-server configuration [ template template-name ]

Parameters

Parameter

Description

Value

template template-name

Specifies the name of a RADIUS server template.

If this parameter is not specified, configuration information of all RADIUS server templates is displayed.

The RADIUS server template must already exist.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

After the configuration of a RADIUS server template is completed or a RADIUS fault needs to be rectified, you can run this command to check whether the configuration of the RADIUS server template is correct.

Example

# Display configuration information about the RADIUS server template named shiva.

<sysname> display radius-server configuration template shiva
  ------------------------------------------------------------------------------
  Server-template-name          :  shiva
  Protocol-version              :  standard
  Traffic-unit                  :  B
  Shared-secret-key             :  ******
  Group-filter                  :  class
  Timeout-interval(in second)   :  5
  Retransmission                :  2
  EndPacketSendTime             :  0
  Dead time(in minute)          :  5
  Domain-included               :  YES
  NAS-IP-Address                :  -
  Calling-station-id MAC-format :  xxxx-xxxx-xxxx
  Called-station-id MAC-format  :  XX-XX-XX-XX-XX-XX    
  NAS-Port-ID format            :  New              
  Service-type                  :  -      
  Server algorithm              :  master-backup 
  Detect-interval(in second)    :  60 
  Detect up-server(in second)   :  0  
  Detect timeout(in second)     :  3
  Testuser-username             :  huawei
  Testuser-ciperpwd             :  %^%#.5*EDl^j_WXg[#Z>plj8;k|8.s*ju<_F~g9k`0*9%^%#
  Chargeable-user-identity      :  Not Support  
  CUI Not reject                :  No
  Authentication Server 1       :  10.7.66.66     Port:1812  Weight:80  [up]
                                   Vrf:- LoopBack:NULL Vlanif:10
                                   Source IP: ::
  Authentication Server 2       :  10.7.66.67     Port:1812  Weight:80  [up]
                                   Vrf:- LoopBack:NULL Vlanif:10
                                   Source IP: ::
  Accounting Server     1       :  10.7.66.66     Port:1813  Weight:80  [up]
                                   Vrf:- LoopBack:NULL Vlanif:10
                                   Source IP: ::
  Accounting Server     2       :  10.7.66.67     Port:1813  Weight:80  [up]
                                   Vrf:- LoopBack:NULL Vlanif:10
                                   Source IP: ::
  ------------------------------------------------------------------------------ 
Table 1 Description of the display radius-server configuration template template-name command output

Item

Description

Server-template-name

Name of a RADIUS server template. To configure this item, run the radius-server template command.

Protocol-version

RADIUS protocol version.

Traffic-unit

Traffic unit in the RADIUS server template:

  • B: Byte
  • KB: Kilobyte
  • MB: Megabyte
  • GB: Gigabyte

To configure this item, run the radius-server traffic-unit command.

Shared-secret-key

Shared key in the RADIUS server template. To configure this item, run the radius-server shared-key command.

Group-filter

Filtering field of the user group. To configure this item, run the radius-server group-filter command.

Timeout-interval(in second)

Response timeout period of a RADIUS server. To configure this item, run the radius-server retransmit timeout dead-time command.

Retransmission

Number of times RADIUS packets are retransmitted. To configure this item, run the radius-server retransmit timeout dead-time command.

EndPacketSendTime

Number of times RADIUS accounting-stop packets are retransmitted. To configure this item, run the radius-server accounting-stop-packet resend command.

Dead time(in minute)

Interval for the primary RADIUS server to revert to the active state. To configure this item, run the radius-server retransmit timeout dead-time command.

Domain-included

Whether the RADIUS user name contains the domain name.

  • YES: The user name contains the domain name.
  • NO: The user name does not contain the domain name.
  • Original: The device does not modify the user name entered by the user.

To configure this item, run the radius-server user-name domain-included command.

NAS-IP-Address

NAS IP address in RADIUS packets.

Calling-station-id MAC-format

Encapsulation format of the MAC address in the calling-station-id attribute of RADIUS packets.

Called-station-id MAC-format

Encapsulation format of the MAC address in the called-station-id attribute of RADIUS packets. To configure this item, run the called-station-id mac-format command.

NAS-Port-ID format

Format of the NAS-Port-ID attribute on the RADIUS server. To configure this item, run the radius-server nas-port-id-format command.

Service-type

Service type.

Server algorithm

Algorithm for selecting RADIUS servers:

  • master-backup: specifies the algorithm for selecting RADIUS servers as primary/secondary.
  • loading-share: specifies the algorithm for selecting RADIUS servers as packet-based load balancing.
  • loading-share based-user: specifies the algorithm for selecting RADIUS servers as single user-based load balancing.

To configure this item, run the radius-server algorithm command.

Detect-interval(in second)

Automatic detection interval for RADIUS servers in Down state. To configure this item, run the radius-server detect-server command.

Detect up-server(in second)

Automatic detection interval for RADIUS servers in Up state. To configure this item, run the radius-server detect-server up-server interval command.

Detect timeout(in second)

Timeout period for automatic RADIUS server detection packets. To configure this item, run the radius-server detect-server timeout command.

Testuser-username

User name for automatic RADIUS server detection. To configure this item, run the radius-server testuser command.

Testuser-ciperpwd

User password for automatic RADIUS server detection. To configure this item, run the radius-server testuser command.

Chargeable-user-identity

Whether the device supports the CUI attribute. The value can be:

  • Not Support: The device does not support the CUI attribute.
  • Support: The device supports the CUI attribute.

To configure this item, run the radius-server support chargeable-user-identity command.

CUI Not reject

Whether the device does not process the CUI attribute. The value can be:

  • No: The device processes the CUI attribute.
  • Yes: The device does not process the CUI attribute.

To configure this item, run the radius-server support chargeable-user-identity command.

Authentication Server 1

IP address, interface number, weight, status, source interface, VPN instance, and source IP address of the primary RADIUS authentication server. To configure this item, run the radius-server authentication command.

Authentication Server 2

IP address, interface number, weight, status, source interface, VPN instance, and source IP address of the secondary RADIUS authentication server. To configure this item, run the radius-server authentication command.

Accounting Server 1

IP address, interface number, weight, status, source interface, VPN instance, and source IP address of the primary RADIUS accounting server. To configure this item, run the radius-server accounting command.

Accounting Server 2

IP address, interface number, weight, status, source interface, VPN instance, and source IP address of the secondary RADIUS accounting server. To configure this item, run the radius-server accounting command.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >