Configuring The Timers Of Tacacs Servers - H3C S3610 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Caution:
Generally, the access users are named in the userid@isp-name format. Where,
isp-name behind the @ character represents the ISP domain name. If the TACACS
server does not accept the user name carrying isp domain name, it is necessary to
remove the domain name from the user names before they are sent to the TACACS
server.
The nas-ip command in HWTACACS scheme view only takes effect for the current
HWTACACS scheme, while that in system view is for all HWTACACS schemes.
The former one takes priority in implementation.

1.5.7 Configuring the Timers of TACACS Servers

Table 1-28 Configure the timers of TACACS servers
Operation
Enter system view
Create
HWTACACS
scheme and enter its
view
Set the
timeout
TACACS servers
Set the wait time for
the primary server to
restore the active
state
Set the
accounting interval
Command
system-view
a
hwtacacs
hwtacacs-scheme-nam
e
response timer
time of response-timeout
seconds
timer quiet minutes
timer
real-time
realtime-accounting
minutes
Chapter 1 AAA & RADIUS & HWTACAC
—
Required
scheme
By
scheme exists.
Optional
By default, the response timeout
time is five seconds.
Optional
By default, the primary server
waits
restoring the active state.
Optional
By
accounting interval is 12 minutes.
1-39
S Configuration
Description
default, no HWTACACS
five minutes
default, the real-time
before