Setting Timers Regarding Hwtacacs Servers; Displaying And Maintaining Hwtacacs - H3C S5120-EI Series Operation Manual

If a HWTACACS server does not support a username with the domain name, you can configure the
device to remove the domain name before sending the username to the server.
The nas-ip command in HWTACACS scheme view is only for the current HWTACACS scheme,
while the hwtacacs nas-ip command in system view is for all HWTACACS schemes. However, the
nas-ip command in HWTACACS scheme view overwrites the configuration of the hwtacacs
nas-ip command.

Setting Timers Regarding HWTACACS Servers

Follow these steps to set timers regarding HWTACACS servers:
To do...
Enter system view
Create a HWTACACS scheme
and enter HWTACACS scheme
view
Set the HWTACACS server
response timeout timer
Set the quiet timer for the
primary server
Set the real-time accounting
interval
For real-time accounting, a NAS must transmit the accounting information of online users to the
HWTACACS accounting server periodically. Note that if the device does not receive any response
to the information, it does not disconnect the online users forcibly
The real-time accounting interval must be a multiple of 3.
The setting of the real-time accounting interval somewhat depends on the performance of the NAS
and the HWTACACS server: a shorter interval requires higher performance.

Displaying and Maintaining HWTACACS

To do...
Display configuration information
or statistics of the specified or all
HWTACACS schemes
Use the command...
system-view
hwtacacs scheme
hwtacacs-scheme-name
timer response-timeout
seconds
timer quiet minutes
timer realtime-accounting
minutes
Use the command...
display hwtacacs
[ hwtacacs-server-name
[ statistics ] ] [ slot slot-number ]
1-34
Remarks
—
Required
Not defined by default
Optional
5 seconds by default
Optional
5 minutes by default
Optional
12 minutes by default
Remarks
Available in any view