< Home

Configuring the Shared Key and Algorithm of the RADIUS Server

This section describes how to configure the shared key and algorithm of the RADIUS server using the merge method.

Table 1 Configuring the shared key and algorithm of the RADIUS server

Operation

XPATH

edit-config:merge

  • /huawei-aaa-radius:radius/radius-server/shared-key

  • /huawei-aaa-radius:radius/radius-server/server-algorithm

  • /huawei-aaa-radius:radius/server-shared-key/server-item

Data Requirement

Table 2 Configuring the shared key and algorithm of the RADIUS server

Item

Data

Description

Shared key of the RADIUS server in a RADIUS server template huawei@123

Set the shared key of the RADIUS server in a RADIUS server template to huawei@123.

Algorithm for selecting RADIUS servers in a RADIUS server template loading-share

Set the algorithm for selecting RADIUS servers in a RADIUS server template to load balancing.

Shared key of the RADIUS server that is configured globally

IP address: 10.1.1.1

Shared key: huawei@1234

Set the shared key of the RADIUS server with the IP address 10.1.1.1 to huawei@1234 in the system view.

Request Example

<rpc xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="cf1228d1-c9bc-4e95-9578-4e7d0cd90e25">
 <edit-config>
 <target>
  <running/>
 </target>
 <config>
  <radius xmlns="urn:huawei:params:xml:ns:yang:huawei-aaa-radius">
   <radius-server xmlns:xc="urn:ietf:params:xml:ns:netconf:base:1.0" xc:operation="merge">
    <name>rds</name>
    <vsys>public</vsys>
    <shared-key>huawei@123</shared-key>
    <server-algorithm>load-sharing</server-algorithm>
   </radius-server>
   <hw-aaa-radius:server-shared-key>
     <hw-aaa-radius:server-item>
       <hw-aaa-radius:ip-address>10.1.1.1</hw-aaa-radius:ip-address>
       <hw-aaa-radius:shared-key>huawei@1234</hw-aaa-radius:shared-key>
     </hw-aaa-radius:server-item>
   </hw-aaa-radius:server-shared-key>
  </radius>
 </config>
 </edit-config>
</rpc>

Response Example

Sample of successful response

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="cf1228d1-c9bc-4e95-9578-4e7d0cd90e25">
  <ok/>
</rpc-reply>

Sample of failed response

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="cf1228d1-c9bc-4e95-9578-4e7d0cd90e25">
 <rpc-error>
  <error-app-tag>-1</error-app-tag>
  <error-message>Invalid radius-server shared key</error-message>
  <error-info>Error on node /huawei-aaa-radius:radius/radius-server[name="rds",vsys="public"]/shared-key</error-info>
 </rpc-error>
</rpc-reply>
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic