1-22Configuring RADIUSThe RADIUS protocol is configured on a per scheme basis. After creating a RADIUS scheme, you needto configure the IP addresses and UDP ports of the RADIUS servers for the scheme. The serversinclude authentication/authorization servers and accounting servers, or primary servers and secondaryservers. In other words, the attributes of a RADIUS scheme mainly include IP addresses of primary andsecondary servers, shared key, and RADIUS server type.Actually, the RADIUS protocol configurations only set the parameters necessary for the informationinteraction between a NAS and a RADIUS server. For these settings to take effect, you must referencethe RADIUS scheme containing those settings in ISP domain view. For information about thecommands for referencing a scheme, refer to Configuring AAA.When there are users online, you cannot modify RADIUS parameters other than the retransmissionones and the timers.Creating a RADIUS SchemeBefore performing other RADIUS configurations, follow these steps to create a RADIUS scheme andenter RADIUS scheme view:To do… Use the command… RemarksEnter system view system-view —Create a RADIUS scheme andenter RADIUS scheme viewradius schemeradius-scheme-nameRequiredNot defined by defaultA RADIUS scheme can be referenced by more than one ISP domain at the same time.Specifying the RADIUS Authentication/Authorization ServersFollow these steps to specify the RADIUS authentication/authorization servers:To do… Use the command… RemarksEnter system view system-view —Create a RADIUS scheme andenter RADIUS scheme viewradius schemeradius-scheme-nameRequiredNot defined by default
