Setting The Upper Limit Of Radius Request Retransmission Attempts; Setting The Supported Radius Server Type; Setting The Status Of Radius Servers - 3Com MSR 50 Series Configuration Manual

1772 C 93: AAA/RADIUS/HWTACACS C
HAPTER
n
Setting the Upper Limit
of RADIUS Request
Retransmission
Attempts
n
Setting the Supported
RADIUS Server Type
n
Setting the Status of
RADIUS Servers
ONFIGURATION
The shared key configured on the device must be the same as that configured on
the RADIUS server.
Since RADIUS uses UDP packets to carry data, the communication process is not
reliable. If a NAS receives no response from the RADIUS server before the response
timeout timer expires, it is required to retransmit the RADIUS request. If the
number of transmission attempts exceeds the specified limit but it still receives no
response, it considers the authentication a failure.
Follow these steps to set the upper limit of RADIUS request retransmission
attempts:
To do...
Enter system view
Create a RADIUS scheme and
enter RADIUS scheme view
Set the number of
retransmission attempts of
RADIUS packets
The maximum number of total retransmission attempts of RADIUS packets
■
multiplied by the RADIUS server response timeout period cannot be greater
than 75.
Refer to the timer response-timeout command in the command manual for
■
configuring RADIUS server response timeout period.
Follow these steps to set the supported RADIUS server type:
To do...
Enter system view
Create a RADIUS scheme and
enter RADIUS scheme view
Specify the RADIUS server
type supported by the device
If you change the type of RADIUS server, the data stream destined to the
■
original RADIUS server will be restored to the default unit.
When a third-party RADIUS is used, you can configure the RADIUS server to
■
standard or extended. When CAMS server is used, you must configure the
RADIUS server to extended.
When a primary server, authentication/authorization server or accounting server,
fails, the device automatically turns to the secondary server.
Use the command...
system-view
radius scheme
radius-scheme-name
retry retry-times
Use the command...
system-view
radius scheme
radius-scheme-name
server-type { extended |
standard }
Remarks
-
Required
By default, no RADIUS scheme
is created.
Optional
3 by default
Remarks
-
Required
By default, no RADIUS scheme
is created.
Optional
By default, the supported
RADIUS server type is
standard.