Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring Failover Mode and Policy (SRC CLI)

    You must configure failover mode and policy for accounting and authentication targets upstream by completing the following tasks:

    1. Configuring Failover Mode (SRC CLI)
    2. Configuring Fast Fail Options for the Failover Policy
    3. Configuring Retry Options for the Failover Policy

    Configuring Failover Mode (SRC CLI)

    You must configure failover mode for both accounting and authentication messages. Use the following statement to configure failover mode:

    shared sic group identifier radius network-element id downstream (authentication | accounting) {failover-mode (round-robin | primary-backup);}

    To configure failover mode:

    1. From configuration mode, access the statement that configures the network element failover mode and specify whether the connection is for authentication or accounting messages.

      For example, this sample procedure uses group1 for the group identifier, ne1 for the network element identifier, and accounting as the connection.

      [edit]user@host# edit shared sic group group1 radius network-element ne1 downstream accounting
    2. Specify failover mode used by the network element.
      [edit shared sic group group1 radius network-element ne1 downstream]user@host# set failover-mode (round-robin | primary-backup)

      Where:

      • round-robin—When this failover mode is used, messages are sent to the network element over alternating paths.
      • primary-backup—When this failover mode is used, messages are sent over the primary path unless it is unavailable, in which case messages are sent over the backup path.

    Configuring Fast Fail Options for the Failover Policy

    You must configure fast fail options for the failover policy for both accounting and authentication messages. Use the following statement to configure fast fail options:

    shared sic group identifier radius network-element id downstream (authentication | accounting) failover-policy
    shared sic group identifier radius network-element id downstream (authentication | accounting) failover-policy fast-fail { minimum-number minimum-number; timeout timeout; reset-delay reset-delay; }

    To configure fast fail options for the failover policy:

    1. From configuration mode, access the statement that configures fast fail options for the failover policy. For example, this sample procedure uses group1 for the group identifier, ne1 for the network element identifier, and accounting as the connection type.
      edit shared sic group group1 radius network-element ne1 downstream accounting failover-policy fast-fail
    2. Specify the minimum number of times the message is retransmitted if an acknowledgment from the target is not received.
      [edit shared sic group group1 radius network-element ne1 downstream accounting failover-policy fast-fail]user@host# set minimum-number minimum-number
    3. Specify the time in seconds before the target is placed into fast fail mode.
      [edit shared sic group group1 radius network-element ne1 downstream accounting failover-policy fast-fail]user@host# set timeout timeout
    4. Specify the time in seconds after which the target is taken out of fast fail mode.
      [edit shared sic group group1 radius network-element ne1 downstream accounting failover-policy fast-fail]user@host# set reset-delay reset-delay

    Configuring Retry Options for the Failover Policy

    You must configure retry options for the failover policy for both accounting and authentication messages. Use the following statement to configure retry options:

    shared sic group identifier radius network-element id downstream (authentication | accounting) failover-policy retry { number number; timeout timeout; }

    To configure retry options for the failover policy:

    1. From configuration mode, access the statement that configures retry options for the failover policy. For example, this sample procedure uses group1 for the group identifier, ne1 for the network element identifier, and accounting as the connection type.
      edit shared sic group group1 radius network-element ne1 downstream accounting failover-policy retry
    2. Specify the maximum number of times a message is retransmitted if an acknowledgment from the target is not received.
      [edit shared sic group group1 radius network-element ne1 downstream accounting failover-policy retry]user@host# set number number
    3. Specify the number of seconds between retry attempts.
      [edit shared sic group group1 radius network-element ne1 downstream accounting failover-policy retry]user@host# set timeout timeout

    Modified: 2016-05-19