Setting The Maximum Number Of Pending Radius Requests; Setting The Status Of Radius Servers - H3C SR8800-F Configuration Manual

Comware 7 user access
Hide thumbs Also See for SR8800-F:
Table of Contents

Advertisement

Setting the maximum number of pending RADIUS requests

About the maximum number of pending RADIUS requests
This feature controls the rate of RADIUS requests that are sent to the RADIUS server. Use this
feature if the RADIUS server has a limited performance and cannot concurrently process too many
RADIUS requests.
The device has two types of pending packet counters, one for the RADIUS authentication server and
the other for the RADIUS accounting server. A pending packet counter is used to record the number
of sent RADIUS requests for which no responses are received from the RADIUS server. The
maximum value of a pending packet counter is determined by this command.
If you set the maximum number of pending authentication or accounting requests, a pending packet
counter will be started for each RADIUS authentication or accounting server.
1.
The device starts a pending packet counter for a RADIUS authentication or accounting server
after sending the first authentication or accounting request to the server.
2.
The device keeps sending the corresponding type of requests to the server before the counter
reaches the maximum value. The number of requests that can be sent to the server is the
difference between the counter value and the maximum number.
The counter increases by 1 each time the device sends a corresponding request.
The counter decreases by 1 each time the device receives a respond from the server or the
respond timeout timer for a request expires.
3.
The device buffers the subsequent requests when the counter reaches the maximum value.
If the value of the counter falls below the maximum value, the device sends the buffered
requests in the sequence the requests are buffered.
Procedure
To set the maximum number of pending RADIUS requests:
Step
1.
Enter system view.
2.
Enter RADIUS scheme view.
3.
Set the maximum number of
pending RADIUS requests.

Setting the status of RADIUS servers

About RADIUS server status
To control the RADIUS servers with which the device communicates when the current servers are no
longer available, set the status of RADIUS servers to blocked or active. You can specify one primary
RADIUS server and multiple secondary RADIUS servers. The secondary servers function as the
backup of the primary server. When the RADIUS server load sharing feature is disabled, the device
chooses servers based on the following rules:
When the primary server is in active state, the device communicates with the primary server.
If the primary server fails, the device performs the following operations:
Changes the server status to blocked.
Starts a quiet timer for the server.
Tries to communicate with a secondary server in active state that has the highest priority.
Command
system-view
radius scheme
radius-scheme-name
response-pending-limit
{ accounting |
authentication }
max-number
29
Remarks
N/A
N/A
By default, the number of pending
RADIUS requests is not restricted.

Advertisement

Table of Contents
loading

Table of Contents