radius-server algorithm
Function
The radius-server algorithm command configures the algorithm for selecting RADIUS servers.
The undo radius-server algorithm command restores the default algorithm for selecting RADIUS servers.
By default, the algorithm for selecting RADIUS servers is primary/secondary.
Format
radius-server algorithm { loading-share | master-backup } [ based-user ]
undo radius-server algorithm
Parameters
Parameter |
Description |
Value |
|---|---|---|
loading-share |
Sets the algorithm for selecting RADIUS servers to load balancing. |
- |
based-user |
Sets the algorithm for selecting RADIUS servers to the single user-based algorithm. If this parameter is not specified, the algorithm for selecting RADIUS servers is the packet-based algorithm. |
- |
master-backup |
Sets the algorithm for selecting RADIUS servers to primary/secondary. |
- |
Usage Guidelines
Usage Scenario
- When master-backup is specified, the weight is used to determine the primary and secondary RADIUS authentication or accounting servers. The server with a larger weight value is the primary server. If devices have the same weight, the server that was first configured is the primary server.
- When loading-share is specified, the device sends a packet to a server according to the weights configured on servers. For example, if the weights of RADIUS server A, RADIUS server B, and RADIUS server C are 80, 80, and 40 respectively, the probabilities of sending packets to RADIUS server A, RADIUS server B, and RADIUS server C are as follows:
- RADIUS server A: 80/(80 + 80 + 40) = 40%
- RADIUS server B: 80/(80 + 80 + 40) = 40%
- RADIUS server C: 40/(80 + 80 + 40) = 20%
If the algorithm for selecting RADIUS servers is set to the single user-based algorithm, authentication server information is saved in the authentication phase, and the device preferentially sends an accounting request to the accounting server in the accounting phase when the accounting server is the same as the authentication server. If the algorithm for selecting RADIUS servers is set to the packet-based algorithm, authentication server information is not saved in the authentication phase, and the accounting server is reselected in the accounting phase, which may result in that authentication and accounting for a user is not performed on the same server.
Precautions
If you run the radius-server algorithm command multiple times in the same RADIUS server template view, only the latest configuration takes effect.
