< Home

display radius-server configuration

Function

The display radius-server configuration command displays configuration information about a RADIUS server template.

Format

display radius-server configuration [ template template-name ]

Parameters

Parameter

Description

Value

template template-name

Specifies the name of a RADIUS server template.

If this parameter is not specified, configuration information of all RADIUS server templates is displayed.

The RADIUS server template must already exist.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

After the configuration of a RADIUS server template is completed or a RADIUS fault needs to be rectified, you can run this command to check whether the configuration of the RADIUS server template is correct.

Example

# Display configuration information about the RADIUS server template named shiva.

<HUAWEI> display radius-server configuration template shiva
  ------------------------------------------------------------------------------
  Server-template-name          :  shiva
  Protocol-version              :  standard
  Traffic-unit                  :  B
  Shared-secret-key             :  %^%#O09i(W[^YT4g#Z37Nct9$IK#TH(-B6-1|<;q|D)"%^%#
  Group-filter                  :  class
  Timeout-interval(in second)   :  5
  Retransmission                :  2
  EndPacketSendTime             :  0
  Dead time(in minute)          :  5
  Domain-included               :  YES
  NAS-IP-Address                :  -
  Calling-station-id MAC-format :  xxxx-xxxx-xxxx
  Called-station-id MAC-format  :  XX.XX.XX.XX.XX.XX
  NAS-Port-ID format            :  New 
  Service-type                  :  - 
  WLAN Called-station-id format :  ap-mac:ssid
  NAS-IPv6-Address              :  ::
  Server algorithm              :  master-backup 
  Detect-interval(in second)    :  60 
  Detect up-server(in second)   :  0  
  Detect timeout(in second)     :  3
  Testuser-username             :  huawei
  Testuser-ciperpwd             :  %^%#.5*EDl^j_WXg[#Z>plj8;k|8.s*ju<_F~g9k`0*9%^%#
  Chargeable-user-identity      :  Not Support  
  CUI Not reject                :  No
  Enable framed-ip-address      :  Yes 
  Authentication Server 1       :  10.7.66.66     Port:1812  Weight:80  [up]
                                   Vrf:- LoopBack:NULL Vlanif:NULL
                                   Source IP: ::
  Authentication Server 2       :  10.7.66.67     Port:1812  Weight:80  [up]
                                   Vrf:- LoopBack:NULL Vlanif:NULL
                                   Source IP: ::
  Accounting Server     1       :  10.7.66.66     Port:1813  Weight:80  [up]
                                   Vrf:- LoopBack:NULL Vlanif:NULL
                                   Source IP: ::
  Accounting Server     2       :  10.7.66.67     Port:1813  Weight:80  [up]
                                   Vrf:- LoopBack:NULL Vlanif:NULL
                                   Source IP: ::
  ------------------------------------------------------------------------------
Table 1 Description of the display radius-server configuration template template-name command output

Item

Description

Server-template-name

Name of a RADIUS server template. To configure this item, run the radius-server template command.

Protocol-version
RADIUS protocol version:
  • standard
  • huawei
  • iphotel
  • portal

Traffic-unit

Traffic unit in the RADIUS server template.

  • B: Byte
  • KB: Kilobyte
  • MB: Megabyte
  • GB: Gigabyte

To configure this item, run the radius-server traffic-unit command.

Shared-secret-key

Shared key in the RADIUS server template. To configure this item, run the radius-server shared-key command.

Group-filter

Filtering field of a user group. Currently, only the class field can be used as the filtering field of a user group.

Timeout-interval(in second)

Response timeout period of a RADIUS server. To configure this item, run the radius-server retransmit timeout command.

Retransmission

Number of times RADIUS packets are retransmitted. To configure this item, run the radius-server retransmit timeout command.

EndPacketSendTime

Number of times RADIUS accounting-stop packets are retransmitted. To configure this item, run the radius-server accounting-stop-packet resend command.

Dead time(in minute)

Interval for the primary RADIUS server to revert to the active state. To configure this item, run the radius-server retransmit timeout command.

Domain-included

Whether the RADIUS user name contains the domain name.

  • YES: The user name contains the domain name.
  • NO: The user name does not contain the domain name.
  • Original: The device does not modify the user name entered by the user.

To configure this item, run the radius-server user-name domain-included command.

NAS-IP-Address

NAS IP address in RADIUS packets.

Calling-station-id MAC-format

Encapsulation format of the MAC address in the calling-station-id attribute of RADIUS packets.

Called-station-id MAC-format

Encapsulation format of the MAC address in the called-station-id attribute of RADIUS packets. To configure this item, run the called-station-id mac-format command.

NAS-Port-ID format

Format of the NAS-Port-ID attribute on the RADIUS server.

  • New: Uses the new format of the NAS-Port-ID attribute.
  • New client-option82: Specifies that the content of the circuit ID suboption in the Option 82 field is encapsulated into the NAS-Port-ID attribute in a RADIUS packet. The format of the NAS-Port-ID attribute is the same as that of the suboption.
  • Old: Uses the old format of the NAS-Port-ID attribute.
  • Vm: Uses the NAS-Port-ID attribute format of the VM.
    NOTE:

    Only the S5720-EI supports this parameter.

  • vendor 9: Uses the NAS-Port-ID format of Cisco.

To configure this item, run the radius-server nas-port-id-format command.

Service-type

Service type.

WLAN Called-station-id format

Encapsulation content of the called-station-id (30) attribute in RADIUS packets.

To configure this item, run the called-station-id wlan-user-format command.

NOTE:

Only the S5730-HI, S5731-H, S5731S-H, S6730-H, S6730S-H, S5732-H, S6720-HI, and S5720-HI support this item.

NAS-IPv6-Address

NAS IPv6 address in RADIUS packets.

Server algorithm

Algorithm for selecting RADIUS servers:

  • master-backup: specifies the algorithm for selecting RADIUS servers as packet-based primary/secondary.
  • master-backup based-user: specifies the algorithm for selecting RADIUS servers as single user-based primary/secondary.
  • loading-share: specifies the algorithm for selecting RADIUS servers as packet-based load balancing.
  • loading-share based-user: specifies the algorithm for selecting RADIUS servers as single user-based load balancing.

To configure this item, run the radius-server algorithm command.

Detect-interval(in second)

Automatic detection interval for RADIUS servers in Down state. To configure this item, run the radius-server detect-server command.

Detect up-server(in second)

Automatic detection interval for RADIUS servers in Up state. To configure this item, run the radius-server detect-server up-server interval command.

Detect timeout(in second)

Timeout period for automatic RADIUS server detection packets. To configure this item, run the radius-server detect-server timeout command.

Chargeable-user-identity

Whether the device supports the CUI attribute. The value can be:

  • Not Support: The device does not support the CUI attribute.
  • Support: The device supports the CUI attribute.

To configure this item, run the radius-server support chargeable-user-identity command.

CUI Not reject

Whether the device does not process the CUI attribute. The value can be:

  • No: The device processes the CUI attribute.
  • Yes: The device does not process the CUI attribute.

To configure this item, run the radius-server support chargeable-user-identity command.

Enable framed-ip-address
Whether the device is enabled to encapsulate the RADIUS attribute Framed-IP-Address into a RADIUS authentication request packet when the RADIUS authentication request packet sent by a user does not carry the user IP address. The value can be:
  • No: disabled
  • Yes: enabled

To configure this item, run the radius-server framed-ip-address no-user-ip enable command.

Testuser-username

User name for automatic RADIUS server detection. To configure this item, run the radius-server testuser command.

Testuser-ciperpwd

User password for automatic RADIUS server detection. To configure this item, run the radius-server testuser command.

Authentication Server 1

IP address, interface number, weight, status, VPN instance, source interface, and source IP address of the primary RADIUS authentication server. To configure this item, run the radius-server authentication command.

Authentication Server 2

IP address, interface number, weight, status, VPN instance, source interface, and source IP address of the secondary RADIUS authentication server. To configure this item, run the radius-server authentication command.

Accounting Server 1

IP address, interface number, weight, status, VPN instance, source interface, and source IP address of the primary RADIUS accounting server. To configure this item, run the radius-server accounting command.

Accounting Server 2

IP address, interface number, weight, status, VPN instance, source interface, and source IP address of the secondary RADIUS accounting server. To configure this item, run the radius-server accounting command.
Parent Topic: RADIUS Configuration Commands
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >