Operation Manual – AAA & RADIUS & HWTACACS & EADH3C S7500 Series Ethernet SwitchesChapter 1 AAA & RADIUS & HWTACACSConfiguration1-23Caution:A RADIUS scheme can be referenced by multiple ISP domains at the same time.1.4.2 Configuring RADIUS Authentication/Authorization ServersTable 1-13 Configure RADIUS authentication/authorization serverTo do... Use the command... RemarksEnter system view system-view —Create a RADIUS schemeand enter its viewradius schemeradius-scheme-nameRequiredBy default, a RADIUSscheme named systemhas already been createdin the system.Set the IP address andport number of theprimary RADIUSauthentication/authorization serverprimary authenticationip-address [ port-number ]RequiredBy default, the IP addressand UDP port number ofthe primary server are0.0.0.0 and 1812respectively.Set the IP address andport number of thesecondary RADIUSauthentication/authorization serversecondaryauthenticationip-address [ port-number ]OptionalBy default, the IP addressand UDP port number ofthe secondary server are0.0.0.0 and 1812respectively.Caution:z The authentication response sent from the RADIUS server to the RADIUS clientcarries the authorization information. Therefore, no separate authorization servercan be specified.z In an actual network environment, you can either specify two RADIUS servers asthe primary and secondary authentication/authorization servers respectively, orspecify only one server as both the primary and secondaryauthentication/authorization servers.z The IP address and port number of the primary authentication server used by thedefault RADIUS scheme system are 127.0.0.1 and 1645.
