Configuring RADIUS 1773When both the primary and secondary servers are available, the device sendsrequest packets to the primary server.Once the primary server fails, the primary server transfers into the state of block,and the device turns to the secondary server. In this case:■ If the secondary server is available, the device triggers the primary server quiettimer. After the quiet timer times out, the status of the primary server is activeagain and the status of the secondary server remains the same.■ If the secondary server fails, the device restores the status of the primary serverto active immediately.If the primary server has resumed, the device turns to use the primary server andstops communicating with the secondary server. After accounting starts, thecommunication between the client and the secondary server remains unchanged.Follow these steps to set the status of RADIUS servers:n ■ If both the primary server and the secondary server are in the blocked state, itis necessary to manually turn the secondary server to the active state so thatthe secondary server can perform authentication. If the secondary server is stillin the blocked state, the primary/secondary switchover cannot take place.■ If one server is in the active state while the other is blocked, theprimary/secondary switchover will not take place even if the active server is notreachable.Configuring AttributesRelated to the Data Sentto the RADIUS ServerFollow these steps to configure the attributes related to the data sent to theRADIUS server:To do... Use the command... RemarksEnter system view system-view -Create a RADIUS scheme andenter RADIUS scheme viewradius schemeradius-scheme-nameRequiredBy default, no RADIUSscheme is created.Set the status of the primaryRADIUSauthentication/authorizationserverstate primaryauthentication { active |block }Optionalactive for every serverconfigured with IP addressin the RADIUS schemeSet the status of the primaryRADIUS accounting serverstate primary accounting{ active | block }Set the status of the secondaryRADIUSauthentication/authorizationserverstate secondaryauthentication { active |block }Set the status of the secondaryRADIUS accounting serverstate secondary accounting{ active | block }To do... Use the command... RemarksEnter system view system-view -
