HP 6125G Configuration Manual page 47

Security configuration guide
Hide thumbs Also See for 6125G:
Table of Contents

Advertisement

Step
3.
Specify a source IP address
for outgoing HWTACACS
packets.
Setting timers for controlling communication with HWTACACS servers
The switch uses the following timers to control the communication with an HWTACACS server:
Server response timeout timer (response-timeout)—Defines the HWTACACS request
retransmission interval. After sending an HWTACACS request (authentication, authorization, or
accounting request), the switch starts this timer. If the switch receives no response from the server
before this timer expires, it resends the request.
Server quiet timer (quiet)—Defines the duration to keep an unreachable server in blocked state. If
a server is not reachable, the switch changes the server's status to blocked, starts this timer for the
server, and tries to communicate with another server in active state. After this timer expires, the
switch changes the status of the server back to active.
Real-time accounting timer (realtime-accounting)—Defines the interval at which the switch sends
real-time accounting updates to the HWTACACS accounting server for online users. To implement
real-time accounting, the switch must send real-time accounting packets to the accounting server for
online users periodically.
To set timers for controlling communication with HWTACACS servers:
Step
1.
Enter system view.
2.
Enter HWTACACS scheme
view.
3.
Set the HWTACACS server
response timeout timer.
4.
Set the quiet timer for the
primary server.
5.
Set the real-time accounting
interval.
NOTE:
Consider the performance of the NAS and the HWTACACS server when you set the real-time accounting
interval. A shorter interval requires higher performance. A shorter interval requires higher performance.
Displaying and maintaining HWTACACS
Command
nas-ip ip-address
Command
system-view
hwtacacs scheme
hwtacacs-scheme-name
timer response-timeout seconds
timer quiet minutes
timer realtime-accounting minutes
37
Remarks
By default, the IP address of the
outbound interface is used as the
source IP address.
Remarks
N/A
N/A
Optional.
The default HWTACACS server
response timeout timer is 5
seconds.
Optional.
The default quiet timer for the
primary server is 5 minutes.
Optional.
The default real-time accounting
interval is 12 minutes.

Advertisement

Table of Contents
loading

This manual is also suitable for:

6125 blade switch series

Table of Contents