Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All
Configuring Downstream Network Elements and Accounting and Authentication Targets (SRC CLI)
Accounting and authentication targets (RADIUS AAA server) receive requests forwarded by the SIC. These targets reside in downstream network elements. You must configure at least one accounting target and one authentication target. Each target must have a unique name and address.
Configuring SIC Accounting Targets (SRC CLI)
Use the following statements to configure accounting targets:
shared sic group identifier radius
network-element id downstream (authentication
| accounting) accounting-target name { address address; priority priority;}
shared sic group identifier radius
network-element id downstream (authentication
| accounting) accounting-target name { secret secret; outbound-transport outbound-transport; port port; }
To configure an accounting target:
- From configuration mode, access the statement that configures
the accounting target. This sample procedure uses group1 for the group
identifier, ne1 for the network element identifier, and target1 as
the accounting target name.edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1
- Specify the IP address of the RADIUS accounting target
contained in the network element.[edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1]user@host# set address address
- Specify the priority of the target. Targets with lower
priority values are selected before other targets in a failover policy.[edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1]user@host# set priority priority
- Specify the shared secret used by the RADIUS accounting
target.[edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1]user@host# set secret secret
- (Optional) Specify the name of the local transport used
to send requests to the accounting target.[edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1]user@host# set outbound-transport outbound-transport
- (Optional) Specify the UDP port number on which the RADIUS
accounting target listens for requests.[edit shared sic group group1 radius network-element ne1 downstream accounting accounting-target target1]user@host# set port port
Configuring SIC Authentication Targets (SRC CLI)
Use the following statements to configure authentication targets:
shared sic group identifier radius network-element id downstream
(authentication | accounting) authentication-target name {address address;priority priority;}
shared sic group identifier radius network-element id downstream
(authentication | accounting) authentication-target name {secret secret;outbound-transport outbound-transport;port port;}
To configure an authentication target:
- From configuration mode, access the statement that configures
the authentication target. This sample procedure uses group1 for the
group identifier, ne1 for the network element identifier, and target1
as the authentication target name.edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1
- Specify the IP address of the RADIUS authentication target
contained in the network element.[edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1]user@host# set address address
- Specify the priority of the target. Targets with lower
priority values are selected before other targets in a failover policy.[edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1]user@host# set priority priority
- Specify the shared secret used by the RADIUS authentication
target.[edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1]user@host# set secret secret
- (Optional) Specify the name of the local transport used
to send outbound requests to the authentication target.[edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1]user@host# set outbound-transport outbound-transport
- (Optional) Specify the UDP port number on which the RADIUS
authentication target listens for requests.[edit shared sic group group1 radius network-element ne1 downstream authentication authentication-target target1]user@host# set port port
