(Optional) Configuring the Status Parameters of the RADIUS Server
You can configure RADIUS server status parameters on the NetEngine 8000 F to monitor the RADIUS server status.
Context
RADIUS clients can detect the status of RADIUS servers and determine the real-time status of RADIUS servers based on responses from the RADIUS servers. This helps identify which servers are in the Up state so as to process user request packets in real time.
The configuration is valid for all RADIUS servers.
Procedure
- Run system-view
The system view is displayed.
- Run radius-server { dead-count count [ fail-rate fail-rate ] | dead-interval interval }*
The parameters for determining the status change of a RADIUS server from Up to Down are configured.
If the NetEngine 8000 F sends RADIUS packets to the RADIUS server consecutively for a specified number of times but receives no response packet and the interval between the first ignored packet and the nth ignored packet where n is equal to dead-count is longer than the value of dead-interval, the NetEngine 8000 F considers that the RADIUS server is abnormal and sets its status to Down.
- Configure a mode for restoring the Up state of the RADIUS server after its status is set to Down.
After the status of the RADIUS server is set to Down, two modes are available for restoring the Up state of the RADIUS server. Run either of the following command as required.
- Run the radius-server dead-time time-value [ recover-count invalid ] command to configure a period after which the status of the RADIUS server is automatically restored to Up.
After the NetEngine 8000 F sets the status of a RADIUS server to Down, the NetEngine 8000 F waits a period specified by dead-time. Then, the NetEngine 8000 F sets the status of the RADIUS server to Up and attempts to set up a connection with it. If the connection cannot be set up, the NetEngine 8000 F sets the status of the RADIUS server to Down again.
If recover-count invalid is configured, the NetEngine 8000 F sets the RADIUS server status to Up only after the Up timer expires, irrespective of whether response packets are received from the RADIUS server during connection re-establishment.
- Run the radius-server state-recovery-detect { authentication | accounting } username username [ detect-interval detect-interval ] [ detect-threshold detect-threshold ] command to enable RADIUS server status detection and restoration.
To allow the NetEngine 8000 F to accurately determine the status of the RADIUS server, run the radius-server state-recovery-detect { authentication | accounting } username username [ detect-interval detect-interval ] [ detect-threshold detect-threshold ] command to enable RADIUS server status detection and restoration.
Then, the NetEngine 8000 F sends detection packets to the RADIUS server at an interval specified by detect-interval using a username specified by username. If detection succeeds for a consecutive number of times specified by detect-threshold, the NetEngine 8000 F sets the RADIUS server status to Up again.
After the radius-server state-recovery-detect command is run, the radius-server dead-time dead-time [ recover-count invalid ] command configuration fails to take effect. In other words, the status of the RADIUS server will not be automatically restored to Up after a period specified by dead-time elapses.
- Run the radius-server dead-time time-value [ recover-count invalid ] command to configure a period after which the status of the RADIUS server is automatically restored to Up.
- Run commit
The configuration is committed.