Configuration Guide Configuring RADIUS
Set the QoS value issued by the RADIUS server as the COS value of the interface.
Configure the RADIUS function to support the CUI attribute.
Configure the device to support private attributes of other vendors.
Configure the device not to parse the specified attribute of cisco carried by RADIUS packets.
Ruijie(config)#radius-server attribute 31 mac format ietf
Ruijie(config)#radius attribute 16 vendor-type 211
Ruijie(config)#radiussetqoscos
Ruijie(config)#radiussupport cui
Ruijie(config)#radiusvendor-specific extend
Ruijie(config)# no radius vendor-specific attribute support cisco
Conduct packet capture or display debug information of the device to check whether the RADIUS standard
attributes and private attributes are encapsulated/parsed correctly.
3.4.3 Configuring RADIUS Accessibility Detection
Configuration Effect
The device maintains the accessibility status of each configured RADIUS server: reachable or unreachable. The device will
not transmit authentication, authorization, and accounting requests of access users to an unreachable RADIUS server unless
all the other servers in the same RADIUS server group as the unreachable server are all unreachable.
The device actively detects a specified RADIUS server. The active detection function is disabled by default. If the active
detection function is enabled for a specified RADIUS server, the device will, according to the configuration, periodically
transmits detection requests (authentication requests or accounting requests) to the RADIUS server. The transmission
interval is as follows:
For a reachable RADIUS server, the interval is the active detection interval of the reachable RADIUS server (the default
value is 60 minutes).
For an unreachable RADIUS server, the interval is always 1 minute.
Notes
All the following conditions need to be met before the active detection function is enabled for a specified RADIUS server:
The test user name of the RADIUS server is configured on the device.
At least one tested port (authentication port or accounting port) of the RADIUS server is configured on the device.
If the following two conditions are all met, it is deemed that a reachable RADIUS server becomes unreachable:
After the previous correct response is received from the RADIUS server, the time set in radius-server dead-criteria
timeseconds has elapsed.
To Next Page
Loading...
Need help?
General
