Displaying And Debugging Aaa And Radius Protocol - 3Com 400 Family Configuration Manual

208 C 11: 802.1X C
HAPTER
Displaying and
Debugging AAA and
RADIUS Protocol
ONFIGURATION
The value of
minute
smaller the value, the higher the performances of NAS and RADIUS that are
required. When there are a large amount of users (more than 1000, inclusive),
3Com suggests a larger value. The following table recommends the ratio of
value to the number of users.
minute
Table 230 Recommended Ratio of Minute to Number of Users
Number of users
1 to 99
100 to 499
500 to 999
1000
By default,
minute
Configure the RADIUS Server Response Timer
If the NAS receives no response from the RADIUS server after sending a RADIUS
request (authentication/authorization or accounting request) for a period of time,
the NAS resends the request, thus ensuring the user can obtain the RADIUS
service. You can specify this period by setting the RADIUS server response timeout
timer, taking into consideration the network condition and the desired system
performance.
Perform the following configurations in RADIUS Scheme View.
Table 231 Configure the RADIUS Server Response Timer
Operation
Configure the RADIUS server response timer
Restore the default value of the interval
By default, the response timeout timer for the RADIUS server is set to three
seconds.
After the above configuration, execute the
display the running of the AAA and RADIUS configuration, and to verify the effect
of the configuration. Execute the
RADIUS statistics. Execute the
and RADIUS.
Table 232 Displaying and Debugging AAA and RADIUS Protocol
Operation
Display the configuration information of
the specified or all the ISP domains.
Display related information of user's
connection
is related to the performance of NAS and RADIUS server. The
Real-time accounting interval (minute)
3
6
12
15
is set to 12 minutes.
command in User View to reset AAA and
reset
command in User View to debug AAA
debugging
Command
display domain [ isp_name ]
display connection [ access-type {
dot1x | mac-authentication } |
domain domain_name | interface
interface_type interface_number |
ip ip_address | mac mac_address |
radius-scheme radius_scheme_name |
vlan vlanid | ucibindex ucib_index |
user-name user_name ]
Command
timer response-timeout seconds
undo timer response-timeout
command in any view to
display