< Home

radius-server accounting

Function

The radius-server accounting command configures the RADIUS accounting server.

The undo radius-server accounting command deletes the configuration.

By default, no RADIUS accounting server is configured.

Format

radius-server accounting ip-address port [ vpn-instance vpn-instance-name | source { loopback interface-number | ip-address ip-address | vlanif interface-number } | weight weight-value ] *

undo radius-server accounting [ ip-address [ port [ vpn-instance vpn-instance-name | source { loopback interface-number | ip-address ip-address | vlanif interface-number } | weight ] * ] ]

Parameters

Parameter

Description

Value

ip-address

Specifies the IP address of a RADIUS accounting server.

The value is in dotted decimal notation. It must be a valid unicast address.

port

Specifies the port number of a RADIUS accounting server.

The value is an integer that ranges from 1 to 65535.

The port must be consistent with that on the RADIUS server.

vpn-instance vpn-instance-name

Specifies the name of a VPN instance that the RADIUS accounting server is bound to.

The VPN instance must exist.

source loopback interface-number

Specifies the number of a loopback interface. The IP address of loopback interface serves as that for sending RADIUS packets to RADIUS accounting server.

The loopback interface must already exist.

source ip-address ip-address

Specifies the source IP address in RADIUS packets sent from the device to a RADIUS accounting server.

If this parameter is specified, ensure that the value of this parameter is the same as the client's IP address specified on the RADIUS accounting server.

If this parameter is not specified, the IP address of the outbound interface is used as the source IP address in RADIUS packets sent from the device to a RADIUS accounting server.

The value is a valid unicast address in dotted decimal notation.

source vlanif interface-number

Specifies the IP address of a VLANIF interface as the source IP address. interface-number specifies the number of a VLANIF interface.

The VLANIF interface must exist.

weight weight-value

Specifies the weight of a RADIUS accounting server.

When multiple servers are available, the device uses the server with the highest weight to perform accounting. If the servers have the same weights, the device uses the server configured first to perform accounting.

The value is an integer that ranges from 0 to 100.

Views

RADIUS server template view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

To perform accounting for users, configure a RADIUS accounting server. The device communicates with a RADIUS accounting server to obtain accounting information, and performs accounting for users based on the accounting information. The device sends accounting packets to the RADIUS accounting server only after the IP address and port number of the RADIUS accounting server are specified in the RADIUS server template.

Precautions

  • The IP address of the primary accounting server must be different from the IP address of the secondary accounting server; otherwise, the configuration fails.
  • When the radius-server algorithm master-backup command has been executed to set the algorithm for selecting RADIUS servers to primary/secondary and both the primary and secondary accounting servers have been configured, the device sends accounting request packets to the secondary accounting server when the following two conditions are met:
    1. The primary server does not send any accounting response packet.
    2. The maximum number of times that the device retransmits authentication and accounting packets is reached.

In an HRP scenario, if the source ip-address ip-address parameter is specified, the entire command is not backed up to the remote device and you need to manually configure this command on the remote device.

Example

# Configure the primary RADIUS accounting server.

<sysname> system-view
[sysname] radius-server template group1
[sysname-radius-group1] radius-server accounting 10.163.155.12 1813

# Configure the secondary RADIUS accounting server.

<sysname> system-view
[sysname] radius-server template group1
[sysname-radius-group1] radius-server accounting 10.163.155.15 1813 weight 50
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >