R21xx-HP FlexFabric 11900 Security Command Reference

36
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the primary RADIUS authentication
server belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the server is
on the public network, do not specify this option.
Usage guidelines
Make sure that the service port and shared key settings of the primary RADIUS authentication server are
the same as those configured on the server.
Two authentication servers specified for a scheme, primary or secondary, cannot have identical IP
address, port number, and VPN settings.
The shared key configured by this command takes precedence over the shared key configured by using
the key authentication command.
If the specified server resides on an MPLS L3VPN, specify the VPN by using the vpn-instance
vpn-instance-name option. The VPN specified by this command takes precedence over the VPN
specified for the RADIUS scheme.
If you use the primary authentication command to modify or delete the primary authentication server
during an authentication process, communication with the primary server times out, and the device looks
for an active server with the highest priority for authentication.
For security purpose, all shared keys, including shared keys configured in plain text, are saved in
ciphertext.
Examples
# Specify the primary authentication server with IP address 10.110 .1.1, U D P p o r t n u m b e r 1812, a n d
plaintext shared key hello for RADIUS scheme radius1.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary authentication 10.110.1.1 1812 key simple hello
Related commands
• display radius scheme
• key (RADIUS scheme view)
• secondary authentication (RADIUS scheme view)
• vpn-instance (RADIUS scheme view)
radius nas-ip
Use radius nas-ip to specify a source address for outgoing RADIUS packets.
Use undo radius nas-ip to delete a source address for outgoing RADIUS packets.
Syntax
radius nas-ip { ipv4-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ]
undo radius nas-ip { ipv4-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ]
Default
The source IP address of an outgoing RADIUS packet is the IP address of the outbound interface.
Views
System view