Configuring The User Re-Authentication At Reboot - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches
Table 3-19 Setting the maximum retransmitting times of stopping accounting request
Set the maximum retransmitting times of stopping
accounting request
Restore the maximum retransmitting times of
stopping accounting request to the default value
By default, the stopping accounting request can be retransmitted for up to 500 times.

3.3.11 Configuring the User Re-authentication at Reboot

Note:
Among S3500 series ethernet switches, S3552G, S3552P, S3528G, S3528P, S3526E,
S3526E FM, S3526E FS and S3526C support this function, and S3526, S3526 FM and
S3526 FS don't.
I. Overview
Exclusive users are those with its concurrent online number set to 1 on the CAMS. In
the AAA solution implemented jointly by the switch and CAMS, if the switch reboots
after a user passes the authentication/authorization and begins being accounted, the
switch prompts that the user has been online when the user logs into the switch before
CAMS makes online detection. Therefore, the user cannot access network resources
normally. The user can access the network only after the network administrator deletes
manually the online information of the user.
To solve this problem, user re-authentication at reboot is designed. When this function
is enabled, each time the switch reboots,
The switch generates an Accounting-On message, which mainly includes NAS-ID,
NAS-IP (source IP) and session ID.
The switch sends to CAMS an Accounting-On message.
Upon receiving the Accounting-On message, CAMS detects and deletes the
existing online information of the user based on the NAS-ID, NAS-IP (source IP)
and session ID in the Accounting-On message.
Chapter 3 AAA and RADIUS Protocol Configuration
Operation
Huawei Technologies Proprietary
3-16
Command
retry stop-accounting
retry-times
undo retry stop-accounting