Command Manual (For Soliton) – AAA
H3C S3100 Series Ethernet Switches
Chapter 1 AAA Configuration Commands
1-59
New Radius scheme
[Sysname-radius-radius1] server-type extended
1.2.27 state
Syntax
state
{
primary
|
secondary
} {
accounting
|
authentication
} {
block
|
active
}
View
RADIUS scheme view
Parameters
primary
: Specifies that the server to be set is a primary RADIUS server.
secondary
: Specifies that the server to be set is a secondary RADIUS server.
accounting
: Specifies that the server to be set is a RADIUS accounting server.
authentication
: Specifies that the server to be set is a RADIUS
authentication/authorization server.
block
: Sets the status of the specified RADIUS server to
block
(that is, the down state).
active
: Sets the status of the specified RADIUS server to
active
(that is, the normal
working state).
Description
Use the
state
command to set the status of a RADIUS server.
By default, all RADIUS servers in any customized RADIUS scheme are in the
block
state; the primary RADIUS servers in the default RADIUS scheme "system" are in the
active
state, and the secondary RADIUS servers in "system" are in the
block
state.
For the primary and secondary servers (authentication/authorization servers, or
accounting servers) in a RADIUS scheme, note that:
z
When the switch fails to communicate with the primary server due to some server
trouble, the switch will turn to the secondary server and exchange messages with
the secondary server.
z
After the primary server remains in the block state for a set time (set by the
timer
quiet
command), the switch will try to communicate with the primary server again
when it receives a RADIUS request. If it finds that the primary server has
recovered, the switch immediately restores the communication with the primary
server instead of communicating with the secondary server, and at the same time
restores the status of the primary server to active while keeping the status of the
secondary server unchanged.
z
When both primary and secondary servers are in the active or block state, the
switch sends messages only to the primary server.
