Configuring the RADIUS Server
Configure Remote Authentication Dial-In User Service (RADIUS) parameters if a remote RADIUS server implements authentication and accounting.
- Configuring the RADIUS Authentication and Accounting Servers
- If a server performs both RADIUS authentication and accounting functions, it uses a separate interface for each function.
- (Optional) Configuring the Algorithm for Selecting the RADIUS Server
- If there is more than one authentication or accounting server in a RADIUS server group, you can configure a RADIUS server selection algorithm to implement load balancing or master/backup for these servers.
- (Optional) Configuring the Negotiated Parameters of the RADIUS Server
- A RADIUS server and the NetEngine 8000 F must use the same RADIUS parameters and message format to communicate.
- (Optional) Disabling RADIUS Attributes
- You must enable RADIUS attribute translation before disabling RADIUS attributes.
- (Optional) Configuring the Source Interface of the RADIUS Server Group
- When the NetEngine 8000 F connects to multiple RADIUS servers, you can configure the source interface of each RADIUS server on the NetEngine 8000 F to identify the route between the NetEngine 8000 F and each RADIUS server.
- (Optional) Configuring the Status Parameters of the RADIUS Server
- You can configure RADIUS server status parameters on the NetEngine 8000 F to monitor the RADIUS server status.
- (Optional) Configuring the Extended Source Ports of RADIUS
- If you do not want to use the default extended source interface to send and receive RADIUS packets, you can change the default extended source interface of a RADIUS server.
- Configuring DSCP Priorities for RADIUS Packets
- To prevent RADIUS packets sent by the NetEngine 8000 F from being discarded in the case of network congestion, you can set DSCP values for the RADIUS packets.
- (Optional) Configuring CAR for Whitelisted RADIUS Sessions
- You can configure CAR for whitelisted RADIUS sessions to limit the rate at which packets of the whitelisted RADIUS sessions are sent to the RADIUS server. This configuration prevents non-whitelisted RADIUS sessions from preempting bandwidth if the RADIUS server encounters a traffic burst.
- Verifying the RADIUS Configuration
- You can verify the server configurations, RADIUS attributes supported by the system, and statistics on RADIUS packets.