The radius-server state-recovery-detect command enables status detection and restoration of RADIUS authentication and accounting servers.
The undo radius-server state-recovery-detect command restores the default configuration.
By default, status detection and restoration of RADIUS authentication and accounting servers is disabled.
radius-server state-recovery-detect { authentication | accounting } username username [ detect-interval detect-interval ] [ detect-threshold detect-threshold ]
undo radius-server state-recovery-detect { authentication | accounting } [ username username ] [ detect-interval detect-interval ] [ detect-threshold detect-threshold ]
| Parameter | Description | Value |
|---|---|---|
| authentication |
Specifies a RADIUS authentication server. |
- |
| accounting |
Specifies a RADIUS accounting server. |
- |
| username username |
Specifies a user name for RADIUS server status detection. |
The value is a string of 1 to 253 case-sensitive characters, spaces not supported. |
| detect-interval detect-interval |
Specifies a detection interval. |
The value is an integer ranging from 10 to 3600, in seconds. The default value is 30s. |
| detect-threshold detect-threshold |
Specifies the number of consecutive successful detections required for restoring the Up state of a RADIUS server. |
The value is an integer ranging from 1 to 100. The default value is 3. |
Usage Scenario
After the status of a RADIUS server is set to Down, the status of the RADIUS server is automatically restored to Up after a specified period of time by default. However, the device does not know the actual status of the RADIUS server and only assumes that the server is in the Up state. To allow the device to accurately determine the status of the RADIUS server, run the radius-server state-recovery-detect command to enable RADIUS server status detection and restoration.
Then, the device sends detection packets to the RADIUS server at an interval specified by the parameter detect-interval using a user name specified by the parameter username. If detection succeeds for a consecutive number of times specified by the parameter detect-threshold , the device sets the RADIUS server status to Up again.Configuration Impact
After the radius-server state-recovery-detect command is run, the radius-server dead-time <dead-time> command configuration fails to take effect. In other words, the status of the RADIUS server will not be automatically restored to Up after a period specified by <dead-time> elapses.
Precautions
Before configuring the radius-server state-recovery-detect command, ensure that the RADIUS server can respond to Accounting Stop requests from sessions for which no accounting has been performed, so that the RADIUS server can successfully receive detection packets.
In VS mode, this command is supported only by the admin VS.
<HUAWEI> system-view [~HUAWEI] radius-server state-recovery-detect authentication username abc detect-interval 100 detect-threshold 5