Table of Contents
Advertisement
Operation Manual - Security
Quidway S3500 Series Ethernet Switches
Table 3-11 Setting RADIUS packet encryption key
Set RADIUS authentication/authorization packet
encryption key
Restore
authentication/authorization packet encryption key.
Set RADIUS accounting packet key
Restore the default RADIUS accounting packet key
By default, the keys of RADIUS authentication/authorization and accounting packets
are all "huawei".
3.3.4 Setting Response Timeout Timer of RADIUS Server
After RADIUS (authentication/authorization or accounting) request packet has been
transmitted for a period of time, if NAS has not received the response from RADIUS
server, it has to retransmit the request to guarantee RADIUS service for the user.
You can use the following command to set response timeout timer of RADIUS server.
Perform the following configurations in RADIUS scheme view.
Table 3-12 Setting response timeout timer of RADIUS server
Set response timeout timer of RADIUS server
Restore the response timeout timer of RADIUS server to
default value
By default, timeout timer of RADIUS server is 3 seconds.
3.3.5 Setting Retransmission Times of RADIUS Request Packet
Since RADIUS protocol uses UDP packet to carry the data, the communication process
is not reliable. If the RADIUS server has not responded NAS before timeout, NAS has
to retransmit RADIUS request packet. If it transmits more than the specified retry-times,
NAS considers the communication with the primary and secondary RADIUS servers
has been disconnected.
You can use the following command to set retransmission times of RADIUS request
packet.
Perform the following configurations in RADIUS scheme view.
Chapter 3 AAA and RADIUS Protocol Configuration
Operation
the
default
Operation
Huawei Technologies Proprietary
3-12
Command
key authentication string
RADIUS
undo key authentication
key accounting string
undo key accounting
timer seconds
undo timer
Command
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
