254 CHAPTER 21: AAA C ONFIGURATIONn Actually, the RADIUS service configuration only defines the parameters forinformation exchange between switch and RADIUS server. To make theseparameters take effect, you must reference the RADIUS scheme configured withthese parameters in an ISP domain view (refer to “AAA Configuration Task List”on page 245).Creating a RADIUSSchemeThe RADIUS protocol configuration is performed on a RADIUS scheme basis. Youshould first create a RADIUS scheme and enter its view before performing otherRADIUS protocol configurations.n A RADIUS scheme can be referenced by multiple ISP domains simultaneously.Configuring RADIUSAuthentication/Authorization Serversn ■ The authentication response sent from the RADIUS server to the RADIUS clientcarries authorization information. Therefore, you need not (and cannot) specifya separate RADIUS authorization server.Table 190 Create a RADIUS schemeOperation Command RemarksEnter system view system-view -Enable RADIUS authenticationportradius client enable OptionalBy default, RADIUSauthentication port isenabled.Create a RADIUS scheme andenter its viewradius schemeradius-scheme-nameRequiredBy default, a RADIUS schemenamed "system" has alreadybeen created in the system.Table 191 Configure RADIUS authentication/authorization serversOperation Command RemarksEnter system view system-view -Create a RADIUS scheme andenter its viewradius schemeradius-scheme-nameRequiredBy default, a RADIUS schemenamed "system" has alreadybeen created in the system.Set the IP address and portnumber of the primaryRADIUSauthentication/authorizationserverprimary authenticationip-address [ port-number ]RequiredBy default, the IP address andUDP port number of theprimary server are 0.0.0.0 and1812 respectively for a newlycreated RADIUS scheme.Set the IP address and portnumber of the secondaryRADIUSauthentication/authorizationserversecondary authenticationip-address [ port-number ]OptionalBy default, the IP address andUDP port number of thesecondary server are 0.0.0.0and 1812 respectively for anewly created RADIUSscheme.
