radius nas-ip

Syntax

radius nas-ip { ipv4-address | ipv6 ipv6-address }

undo radius nas-ip { ipv4-address | ipv6 ipv6-address }

View

System view

Default level

2: System level

Parameters

ipv4-address: IPv4 address in dotted decimal notation. It must be an address of the switch and cannot be 0.0.0.0, 255.255.255.255, a class D address, a class E address, or a loopback address.

ipv6 ipv6-address: Specifies an IPv6 address. It must be a unicast address of the switch that is neither a loopback address nor a link-local address.

Description

Use radius nas-ip to specify a source address for outgoing RADIUS packets.

Use undo radius nas-ip to remove the configuration.

By default, the source IP address of an outgoing RADIUS packet is the IP address of the outbound interface.

You can specify up to 16 source IP addresses.

The source IP address of RADIUS packets that a NAS sends must match the IP address of the NAS that is configured on the RADIUS server. A RADIUS server identifies a NAS by its IP address. Upon receiving a RADIUS packet, a RADIUS server checks whether the source IP address of the packet is the IP address of any managed NAS. If yes, the server processes the packet. If not, the server drops the packet.

The setting configured by the nas-ip command in RADIUS scheme view is only for the RADIUS scheme, whereas that configured by the radius nas-ip command in system view is for all RADIUS schemes. The setting in RADIUS scheme view takes precedence.

Related commands: nas-ip.

Examples

# Set the IP address for the switch to use as the source address of the RADIUS packets to 129.10.10.1.

<Sysname> system-view
[Sysname] radius nas-ip 129.10.10.1