Setting the status of RADIUS servers

About RADIUS server status

To control the RADIUS servers with which the device communicates when the current servers are no longer available, set the status of RADIUS servers to blocked or active. You can specify one primary RADIUS server and multiple secondary RADIUS servers. The secondary servers function as the backup of the primary server. When the RADIUS server load sharing feature is disabled, the device chooses servers based on the following rules:

By default, the device sets the status of all RADIUS servers to active. However, in some situations, you must change the status of a server. For example, if a server fails, you can change the status of the server to blocked to avoid communication attempts to the server.

Restrictions and guidelines

The configured server status cannot be saved to any configuration file, and can only be viewed by using the display radius scheme command.

After the device restarts, all servers are restored to the active state.

Procedure

  1. Enter system view.

    system-view

  2. Enter RADIUS scheme view.

    radius scheme radius-scheme-name

  3. Set the RADIUS server status. Choose the following tasks as needed:

    • Set the status of the primary RADIUS authentication server.

      state primary authentication { active | block }

    • Set the status of the primary RADIUS accounting server.

      state primary accounting { active | block }

    • Set the status of a secondary RADIUS authentication server.

      state secondary authentication [ { host-name | ipv4-address | ipv6 ipv6-address } [ port-number | vpn-instance vpn-instance-name ] * ] { active | block }

    • Set the status of a secondary RADIUS accounting server.

      state secondary accounting [ { host-name | ipv4-address | ipv6 ipv6-address } [ port-number | vpn-instance vpn-instance-name ] * ] { active | block }

    By default, a RADIUS server is in active state.