48To do… Use the command… Remarks3. Specify a security policyserver security-policy-server ip-address OptionalNot specified by default• If more than one interface of the switch is configured with user access authentication functions, theinterfaces may use different security policy servers. You can specify up to eight security policy servers fora RADIUS scheme.• If the RADIUS server and the security policy server reside on the same physical switch, you do not need toconfigure the IP address of the security policy server.• The specified security policy server must be a security policy server or RADIUS server that is correctlyconfigured and working normally. Otherwise, the switch will regard it as an illegal server.Enabling the listening port of the RADIUS clientFollow these steps to enable the listening port of the RADIUS client:To do… Use the command… Remarks1. Enter system view system-view —2. Enable the listening port of the RADIUSclient radius client enable OptionalEnabled by defaultSpecifying to interpret RADIUS class attribute as CARparametersAccording to RFC 2865, a RADIUS server assigns the RADIUS class attribute (25) to a RADIUSclient. However, the RFC only requires the RADIUS client to send the attribute to the accountingserver; it does not require the RADIUS client to resolve the attribute. Currently, some RADIUSservers use the class attribute to deliver the assigned committed access rate (CAR) parameters. Tosupport such applications, you need to configure the RADIUS client to interpret the class attributeas the CAR parameters.Follow these steps to configure the RADIUS client to interpret the class attribute as the CARparameters:To do… Use the command… Remarks1. Enter system view system-view —2. Enter RADIUS scheme view radius scheme radius-scheme-name —3. Specify to interpret the classattribute as the CAR parameters attribute 25 carRequiredBe default, RADIUS attribute 25 is notinterpreted as CAR parameters.
