HP 5120 SI Series Security Configuration Manual page 42

To do...
Specify to interpret the class
attribute as the CAR parameters
NOTE:
Whether to configure this feature depends on the implementation of the device and the RADIUS server.
Enabling the RADIUS trap function
With the RADIUS trap function, a NAS sends a trap message in either of these situations:
The status of a RADIUS server changes. If a NAS sends and retransmits an accounting or
•
authentication request to a RADIUS server but gets no response before the maximum number of
transmission attempts is reached, it considers the server unavailable and sends a trap message. If
the NAS receives a response from a RADIUS server in the blocked state, the NAS considers that the
RADIUS server is reachable again and also sends a trap message.
The ratio of the number of failed transmission attempts to the total number of authentication request
•
transmission attempts reaches the threshold. This threshold ranges from 1% to 100% and defaults to
30%. This threshold can only be configured through the MIB.
The failure ratio is generally small. If you see a trap message triggered due to a higher failure ratio, check
the configurations on the NAS and the RADIUS server and the communications between them.
Follow these steps to enable the RADIUS trap function:
To do...
Enter system view
Enable the RADIUS trap
function
Enabling the listening port of the RADIUS client
Follow these steps to enable the listening port of the RADIUS client:
To do...
Enter system view
Enable the listening port of the
RADIUS client
Displaying and maintaining RADIUS
To do...
Display the configuration information
of RADIUS schemes
Display statistics about RADIUS packets
Use the command...
attribute 25 car
Use the command...
system-view
radius trap { accounting-server-down |
authentication-error-threshold |
authentication-server-down }
Use the command...
system-view
radius client enable
Use the command...
display radius scheme
[ radius-scheme-name ] [ slot
slot-number ] [ | { begin | exclude |
include } regular-expression ]
display radius statistics [ slot
slot-number ] [ | { begin | exclude |
include } regular-expression ]
30
Remarks
Required
Be default, RADIUS attribute 25 is not
interpreted as CAR parameters.
Remarks
—
Required
Disabled by default
Remarks
—
Optional
Enabled by default
Remarks
Available in any view
Available in any view