68
[Sysname] radius scheme radius2
[Sysname-radius-radius2] secondary accounting 10.110.1.1 1813
[Sysname-radius-radius2] secondary accounting 10.110.1.2 1813
Related commands
• display radius scheme
• key (RADIUS scheme view)
• primary accounting (RADIUS scheme view)
• vpn-instance (RADIUS scheme view)
secondary authentication (RADIUS scheme view)
Use secondary authentication to specify a secondary RADIUS authentication server.
Use undo secondary authentication to remove a secondary RADIUS authentication server.
Syntax
secondary authentication { ipv4-address | ipv6 ipv6-address } [ port-number | key { cipher | simple }
string | test-profile profile-name | vpn-instance vpn-instance-name ] *
undo secondary authentication [ { ipv4-address | ipv6 ipv6-address } [ port-number | vpn-instance
vpn-instance-name ] * ]
Default
No secondary RADIUS authentication server is specified.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
ipv4-address: Specifies the IPv4 address of the secondary RADIUS authentication server.
ipv6 ipv6-address: Specifies the IPv6 address of the secondary RADIUS authentication server.
port-number: Sets the service port number of the secondary RADIUS authentication server. The value
range for the UDP port number is 1 to 65535, and the default setting is 1812.
key { cipher | simple } string: Sets the shared key for secure communication with the secondary RADIUS
authentication server.
• cipher string: Sets a ciphertext shared key. The string argument is case sensitive.
{ In non-FIPS mode, the key is a string of 1 to 117 ch a ra c t e rs .
{ In FIPS mode, the key is a string of 15 to 117 ch ar a c te r s .
• simple string: Sets a plaintext shared key. The string argument is case sensitive.
{ In non-FIPS mode, the key is a string of 1 to 64 characters.
{ In FIPS mode, the key is a string of 15 to 64 characters. The string must contain digits, uppercase
letters, lowercase letters, and special characters.
test-profile profile-name: Specifies a test profile for detecting the RADIUS server status. The profile-name
argument represents the test profile name, which is a case-sensitive string of 1 to 31 characters.