Setting Timers Regarding Radius Servers - H3C S9500E Series Security Configuration Manual

To do...
2. Specify the source IP
address for RADIUS
packets to be sent
Follow these steps to specify a source IP address for a specific RADIUS scheme:
To do...
1. Enter system view
2. Enter RADIUS scheme view
3. Specify the source IP
address for RADIUS
packets to be sent

Setting timers regarding RADIUS servers

When communicating with the RADIUS server, a switch can enable the following three timers:
•
RADIUS server response timeout (response-timeout): If a NAS receives no response from
the RADIUS server in a period of time after sending a RADIUS request
(authentication/authorization or accounting request), it has to resend the request so that the
user has more opportunity to obtain the RADIUS service. The NAS uses the RADIUS server
response timeout timer to control the transmission interval.
•
Server quiet timer (quiet): If a server is not reachable, the switch changes its state to block,
starts this timer for the server, and turns to a server in active state. After this timer expires,
the switch turns the state of the server to active.
•
Real-time accounting interval (realtime-accounting): This timer defines the interval for
performing real-time accounting of users. After this timer is set, the switch will send
accounting information of online users to the RADIUS server at the specified interval.
Follow these steps to set timers regarding RADIUS servers:
To do...
1. Enter system view
2. Enter RADIUS scheme view
3. Set the RADIUS server response
timeout timer
4. Set the quiet timer for the
primary server
Use the command...
radius nas-ip { ip-address [
vpn-instance vpn-instance-
name ] | ipv6 ipv6-address }
Use the command...
system-view
radius scheme radius-
scheme-name
nas-ip { ip-address | ipv6
ipv6-address }
Use the command...
system-view
radius scheme radius-scheme-
name
timer response-timeout
seconds
timer quiet minutes
46
Remarks
Required
By default, the IP address of the outbound
interface is used as the source IP address.
Remarks
—
—
Required
By default, the IP address of the outbound
interface is used as the source IP address.
Remarks
—
—
Optional
3 seconds by default
Optional
5 minutes by default