R21xx-HP FlexFabric 11900 Security Command Reference
33
Default
An outbound RADIUS packet uses the source IP address specified by the radius nas-ip command in
system view. If the source IP address is not specified, the packet uses the IP address of the egress interface
as the source IP address.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
ipv4-address: Specifies an IPv4 address, which must be an address of the device and cannot be 0.0.0.0,
255.255.255.255, a class D address, a class E address, or a loopback address.
ipv6 ipv6-address: Specifies an IPv6 address, which must be a unicast address of the device and cannot
be a loopback address or a link-local address.
Usage guidelines
The source IP address of the RADIUS packets that a NAS sends must match the IP address of the NAS that
is configured on the RADIUS server. A RADIUS server identifies a NAS by its IP address. Upon receiving
a RADIUS packet, a RADIUS server checks whether the source IP address of the packet is the IP address
of a managed NAS. If yes, the server processes the packet. If not, the server drops the packet.
The setting configured by using the nas-ip command in RADIUS scheme view is effective only for the
RADIUS scheme, whereas that configured by using the radius nas-ip command in system view is effective
for all RADIUS schemes. The setting in RADIUS scheme view takes precedence over the setting in system
view.
If no source IP address is specified for outgoing RADIUS packets, packets returned from the server cannot
reach the device due to a physical port error. HP recommends you to configure a loopback interface
address as the source IP address for outgoing RADIUS packets.
A RADIUS scheme can have only one source IP address for outgoing RADIUS packets. If you specify a
new source IP address for the same RADIUS scheme, the new address overwrites the old one.
Examples
# Set the source IP address for outgoing RADIUS packets to 10.1.1.1.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] nas-ip 10.1.1.1
Related commands
• display radius scheme
• radius nas-ip
primary accounting (RADIUS scheme view)
Use primary accounting to specify the primary RADIUS accounting server.
Use undo primary accounting to remove the configuration.