Command Reference Guide

3Com Router 5000 Family and Router 6000 Family local-server ● 175
Command Reference
local-server
Purpose lUse the local-server command to configure a local RADIUS authentication
server.
Use the undo local-server command to delete a local RADIUS authentication
server.
Syntax local-server nas-ip ip-address key password
undo local-server nas-ip ip-address
Parameters nas-ip ip-address
NAS-IP address of the access server, in dotted decimal
format. By default, there is a local server with a NAS-IP
of 127.0.0.1.
key password
Shared key of the local server, a string consisting of up
to 16 characters. It defaults to 3Com.
Default By default, the system creates a local RADIUS authentication server with the NAS-IP of
127.0.0.1 and the key of 3Com.
Example Configure a local RADIUS authentication server, setting the IP address to 10.110.1.2,
the shared key to aabbcc.
[3Com] local-server nas-ip 10.110.1.2 key aabbcc
View This command can be used in the following views:
■ System view
Description Note that:
■ In addition to the traditional RADIUS client function (that is, employing an
authentication/authorization server and a separate accounting server for user
authentication management), the router provides a simple local RADIUS server
function for authentication and authorization, which is called the local RADIUS
authentication server function.
■ With the local RADIUS authentication server function, the UDP port for
authentication/authorization service must be 1645, and the UDP port for
accounting service must be 1646.
■ The packet encryption key configured using the local-server nas-ip
command must be identical to that configured using the
key authentication
command in RADIUS scheme view.
■ Up to 16 local RADIUS authentication servers can be configured, including the one
created by the system by default.