Retry - H3C MSR Series Command Reference Manual

retry

Use retry to set the maximum number of attempts for transmitting a RADIUS packet to a single
RADIUS server.
Use undo retry to restore the default.
Syntax
retry retries
undo retry
Default
The maximum number of RADIUS packet transmission attempts is 3.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
retries: Specifies the maximum number of RADIUS packet transmission attempts, in the range of 1 to
20.
Usage guidelines
Because RADIUS uses UDP packets to transmit data, the communication is not reliable.
•
If the device does not receive a response to its request from the RADIUS server within the
response timeout period, it retransmits the RADIUS request.
•
If the device does not receive a response from the RADIUS server after the maximum number
of transmission attempts is reached, the device considers the request a failure.
If the client times out during the authentication process, the user is immediately logged off. To avoid
user logoffs, the value multiplied by the following items cannot be larger than the client timeout
period defined by the access module:
•
The maximum number of RADIUS packet transmission attempts.
•
The RADIUS server response timeout period.
•
The number of RADIUS servers in the RADIUS scheme.
When the device sends a RADIUS request to a new RADIUS server, it checks the total amount of
time it has taken to transmit the RADIUS packet. If the amount of time has reached 300 seconds, the
device stops sending the RADIUS request to the next RADIUS server. As a best practice, consider
the number of RADIUS servers when you configure the maximum number of packet transmission
attempts and the RADIUS server response timeout period.
Examples
# In RADIUS scheme radius1, set the maximum number of RADIUS packet transmission attempts
to 5.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] retry 5
Related commands
radius scheme
timer response-timeout (RADIUS scheme view)
108