Setting Timers Regarding Hwtacacs Servers - H3C S9500E Series Security Configuration Manual

Routing switches
Hide thumbs Also See for S9500E Series:
Table of Contents

Advertisement

To do...
2.
Specify the source IP
address for HWTACACS
packets to be sent
Follow these steps to specify a source IP address for a specific HWTACACS scheme:
To do...
1.
Enter system view
2.
Enter HWTACACS scheme
view
3.
Specify the source IP
address for HWTACACS
packets to be sent

Setting timers regarding HWTACACS servers

Follow these steps to set timers regarding HWTACACS servers:
To do...
1.
Enter system view
2.
Enter HWTACACS scheme
view
3.
Set the HWTACACS server
response timeout timer
4.
Set the quiet timer for the
primary server
5.
Set the real-time accounting
interval
For real-time accounting, a NAS must transmit the accounting information of online users to the
HWTACACS accounting server periodically. Note that if the switch does not receive any response to the
information, it does not disconnect the online users forcibly
The real-time accounting interval must be a multiple of 3.
The setting of the real-time accounting interval somewhat depends on the performance of the NAS and
the HWTACACS server: a shorter interval requires higher performance.
Use the command...
hwtacacs nas-ip ip-address
[ vpn-instance vpn-instance-
name ]
Use the command...
system-view
hwtacacs scheme hwtacacs-
scheme-name
nas-ip ip-address
Use the command...
system-view
hwtacacs scheme hwtacacs-
scheme-name
timer response-timeout
seconds
timer quiet minutes
timer realtime-accounting
minutes
54
Remarks
Required
By default, the IP address of the outbound
interface is used as the source IP address.
Remarks
Required
By default, the IP address of the outbound
interface is used as the source IP address.
Remarks
Optional
5 seconds by default
Optional
5 minutes by default
Optional
12 minutes by default

Advertisement

Table of Contents
loading

Table of Contents