HP A5830 Series Configuration Manual page 43

Security switch
Hide thumbs Also See for A5830 Series:
Table of Contents

Advertisement

The IP address of the outbound interface specified by the route
3.
To specify a source IP address for all HWTACACS schemes:
To do...
1.
Enter system view.
2.
Specify a source IP
address for outgoing
HWTACACS packets.
To specify a source IP address for a specific HWTACACS scheme:
To do...
1.
Enter system view.
2.
Enter HWTACACS
scheme view.
3.
Specify a source IP
address for outgoing
HWTACACS packets.
Setting timers for controlling communication with HWTACACS servers
The switch uses the following timers to control the communication with an HWTACACS server:
Server response timeout timer (response-timeout)—Defines the HWTACACS request retransmission
interval. After sending an HWTACACS request (authentication, authorization, or accounting
request), the switch starts this timer. If the switch receives no response from the server before this
timer expires, it resends the request.
Server quiet timer (quiet)—Defines the duration to keep an unreachable server in the blocked state.
If a server is not reachable, the switch changes the server's status to blocked, starts this timer for the
server, and tries to communicate with another server in the active state. After this timer expires, the
switch changes the status of the server back to active.
Real-time accounting timer (realtime-accounting)—Defines the interval at which the switch sends
real-time accounting updates to the HWTACACS accounting server for online users. To implement
real-time accounting, the switch must periodically send real-time accounting packets to the
accounting server for online users.
The setting of the real-time accounting interval somewhat depends on the performance of the NAS and
the HWTACACS server. A shorter interval requires higher performance.
To set timers for controlling communication with HWTACACS servers:
To do...
1.
Enter system view.
2.
Enter HWTACACS scheme
view.
3.
Set the HWTACACS server
response timeout timer.
4.
Set the quiet timer for the
primary server.
Use the command...
system-view
hwtacacs nas-ip ip-address
Use the command...
system-view
hwtacacs scheme hwtacacs-
scheme-name
nas-ip ip-address
Use the command...
system-view
hwtacacs scheme hwtacacs-
scheme-name
timer response-timeout seconds
timer quiet minutes
35
Remarks
Required.
By default, the IP address of the outbound
interface is used as the source IP address.
Remarks
Required.
By default, the IP address of the outbound
interface is used as the source IP address.
Remarks
Optional
5 seconds by default
Optional
5 minutes by default

Advertisement

Table of Contents
loading

Table of Contents