2-11To do… Use the command… RemarksCreate a RADIUS scheme andenter its viewradius schemeradius-scheme-nameRequiredBy default, a RADIUS schemenamed "system" has alreadybeen created in the system.Set the IP address and portnumber of the primary RADIUSauthentication/authorizationserverprimary authenticationip-address [ port-number ]RequiredBy default, the IP address andUDP port number of theprimary server are 0.0.0.0 and1812 respectively for a newlycreated RADIUS scheme.Set the IP address and portnumber of the secondaryRADIUSauthentication/authorizationserversecondary authenticationip-address [ port-number ]OptionalBy default, the IP address andUDP port number of thesecondary server are 0.0.0.0and 1812 respectively for anewly created RADIUSscheme.z The authentication response sent from the RADIUS server to the RADIUS client carriesauthorization information. Therefore, you need not (and cannot) specify a separate RADIUSauthorization server.z In an actual network environment, you can specify one server as both the primary and secondaryauthentication/authorization servers, as well as specifying two RADIUS servers as the primary andsecondary authentication/authorization servers respectively.z The IP address and port number of the primary authentication server used by the default RADIUSscheme "system" are 127.0.0.1 and 1645.Configuring RADIUS Accounting ServersFollow these steps to configure RADIUS accounting servers:To do… Use the command… RemarksEnter system view system-view —Create a RADIUSscheme and enter itsviewradius schemeradius-scheme-nameRequiredBy default, a RADIUS scheme named"system" has already been created inthe system.Set the IP address andport number of theprimary RADIUSaccounting serverprimary accountingip-address [ port-number ]RequiredBy default, the IP address and UDP portnumber of the primary accounting serverare 0.0.0.0 and 1813 for a newly createdRADIUS scheme.
