HPE FlexFabric 5940 Series Security Configuration Manual page 48

Step
format for RADIUS attribute
31.
Setting the data measurement unit for the Remanent_Volume attribute
The RADIUS server uses the Remanent_Volume attribute in authentication or real-time accounting
responses to notify the device of the current amount of data available for online users.
Perform this task to set the data measurement unit for the Remanent_Volume attribute. Make sure
the configured measurement unit is the same as the user data measurement unit on the RADIUS
server.
To set the data measurement unit for the Remanent_Volume attribute:
Step
1. Enter system view.
2. Enter RADIUS scheme
view.
3. Set the data measurement
unit for the
Remanent_Volume
attribute.
Enabling SNMP notifications for RADIUS
When SNMP notifications are enabled for RADIUS, the SNMP agent supports the following
notifications generated by RADIUS:
•
RADIUS server unreachable notification—The RADIUS server cannot be reached. RADIUS
generates this notification if it does not receive a response to an accounting or authentication
request within the specified number of RADIUS request transmission attempts.
•
RADIUS server reachable notification—The RADIUS server can be reached. RADIUS
generates this notification for a previously blocked RADIUS server after the quiet timer expires.
•
Excessive authentication failures notification—The number of authentication failures
compared to the total number of authentication attempts exceeds the specified threshold.
For RADIUS SNMP notifications to be sent correctly, you must also configure SNMP on the device.
For more information about SNMP configuration, see the network management and monitoring
configuration guide for the device.
To enable SNMP notifications for RADIUS:
Step
1. Enter system view.
2. Enable SNMP notifications
for RADIUS.
Displaying and maintaining RADIUS
Execute display commands in any view and reset commands in user view.
Command
{ six | three } separator
separator-character { lowercase |
uppercase }
Command
system-view
radius scheme
radius-scheme-name
attribute remanent-volume unit
{ byte | giga-byte | kilo-byte |
mega-byte }
Command
system-view
snmp-agent trap enable radius
[ accounting-server-down |
authentication-error-threshold |
authentication-server-down |
accounting-server-up |
authentication-server-up ] *
35
Remarks
the format of
HH-HH-HH-HH-HH-HH. The
MAC address is separated by
hyphen (-) into six sections with
letters in upper case.
Remarks
N/A
N/A
By default, the data measurement
unit is kilobyte.
Remarks
N/A
By default, all SNMP notifications
are disabled for RADIUS.