1-27To do… Use the command… Remarksradius nas-ip ip-addressinterface for sending theRADIUS packets will be usedas the source IP address of theRADIUS packets.z Some earlier RADIUS servers cannot recognize usernames that contain an ISP domain name. Inthis case, the device must remove the domain name before sending a username including adomain name. You can configure the user-name-format without-domain command on thedevice for this purpose.z If a RADIUS scheme defines that the username is sent without the ISP domain name, do not applythe RADIUS scheme to more than one ISP domain, thus avoiding the confused situation where theRADIUS server regards two users in different ISP domains but with the same userid as one.z The unit of data flows sent to the RADIUS server must be consistent with the traffic statistics unit ofthe RADIUS server. Otherwise, accounting cannot be performed correctly.z The nas-ip command in RADIUS scheme view is only for the current RADIUS scheme, while theradius nas-ip command in system view is for all RADIUS schemes. However, the nas-ipcommand in RADIUS scheme view takes precedence over the radius nas-ip command.Setting Timers Regarding RADIUS ServersWhen communicating with the RADIUS server, a device can enable the following three timers:z RADIUS server response timeout (response-timeout): If a NAS receives no response from theRADIUS server in a period of time after sending a RADIUS request (authentication/authorization oraccounting request), it has to resend the request so that the user has more opportunity to obtainthe RADIUS service. The NAS uses the RADIUS server response timeout timer to control thetransmission interval.z Primary server quiet timer (timer quiet): If the primary server is not reachable, its state changes toblocked, and the device will turn to the specified secondary server. If the secondary server isreachable, the device starts this timer and communicates with the secondary server. After thistimer expires, the device turns the state of the primary server to active and tries to communicatewith the primary server while keeping the state of the secondary server unchanged. If the primaryserver has come back into operation, the device interacts with the primary server and terminates itscommunication with the secondary server.z Real-time accounting interval (realtime-accounting): This timer defines the interval for performingreal-time accounting of users. After this timer is set, the switch will send accounting information ofonline users to the RADIUS server at the specified interval.Follow these steps to set timers regarding RADIUS servers:To do… Use the command… RemarksEnter system view system-view —Enter RADIUS scheme view radius schemeradius-scheme-name —
