3Com 7757 Configuration Manual page 531

Configuring the User
Re-Authentication upon
Device Restart Function
n
instead of communicating with the secondary server, and at the same time
restores the primary server to the active state while keeping the state of the
secondary server unchanged.
To charge the users in real time, you should set the interval of real-time
accounting. After the setting, the switch sends the accounting information of
online users to the RADIUS server at regular intervals.
Table 416 Set the timers of RADIUS server
Operation Command
Enter system view system-view
Create a RADIUS radius scheme
scheme and enter radius-scheme-name
its view
Set the response timer response-timeout
timeout time of seconds
RADIUS servers
timer seconds
Set the wait time for timer quiet minutes
the primary server
to restore the active
state
Set the real-time timer realtime-accounting
accounting interval minutes
The function applies to the environment where the RADIUS
authentication/accounting server is CAMS.
In an environment with a CAMS server, if the switch reboots after an exclusive user
(a user whose concurrent online number is set to 1 on the CAMS) gets
authenticated and authorized and begins being charged, the switch will give a
prompt that the user has already been online when the user re-logs in to the
network before CAMS performs online user detection, and the user cannot get
authenticated. In this case, the user can access the network again only after the
CAMS administrator manually removes the online information of the user.
The user re-authentication upon device restart function is designed to resolve the
above problem. After this function is enabled, every time the switch restarts:
1 The switch generates an Accounting-On packet, which mainly contains the
following information: NAS-ID, NAS-IP address (source IP address), and session ID.
2 The switch sends the Accounting-On packet to CAMS at regular intervals.
3 Once the CAMS receives the Accounting-On packet, it sends a response to the
switch. At the same time it finds and deletes the original online information of the
users who access the network through the switch before the restart according to
RADIUS Configuration
Description
-
Required
By default, a RADIUS scheme named
"system" has already been created in
the system.
Optional
By default, the response timeout
timer of RADIUS servers expires in
three seconds.
Optional
By default, the primary server waits
five minutes before restoring the
active state.
Optional
By default, the real-time accounting
interval is 12 minutes.
531