User Re-Authentication At Reboot - 3Com 5500-SI Configuration Manual

424 C 21: 802.1
HAPTER
User
Re-authentication at
Reboot
C
X ONFIGURATION
Table 455 Setting the Maximum Retransmitting Times of Stopping Accounting Request
Operation
Set the maximum retransmitting times of stopping
accounting request
Restore the maximum retransmitting times of
stopping accounting request to the default value
By default, the stopping accounting request can be retransmitted up to 500 times.
Enabling the Selection of the Radius Accounting Option
Perform the following configurations in RADIUS Scheme View.
Table 456 Enabling the Selection of RADIUS Accounting Option
Operation
Enable the selection of RADIUS accounting option
Disable the selection of RADIUS accounting option
This command can also be configured in ISP Domain View. For details, refer to
Configuring Relevant Attributes of the ISP Domain.
This section contains information for User Re-authentication at Reboot.
The feature applies to the environments where the RADIUS
authentication/accounting server is CAMS.
In an AAA scheme implemented jointly by the switch and CAMS, if the switch reboots
after an exclusive user (a user whose concurrent online number is set to 1 on the
CAMS) passes the authentication, gets authorized and begins being charged, the
switch will give a prompt that the user has already been online when the user re-logs
onto the network before the CAMS makes online detection. Therefore, the user
cannot access network resources as usual. In this situation, the user can log onto the
network again only after the network administrator manually removes the user's
online information.
The user re-authentication at reboot feature is designed to resolve this problem. After
this feature is enabled, every time the switch reboots:
The switch generates an Accounting-On packet, which mainly contains the
■
following information: NAS-ID, NAS-IP (source IP address), and session ID.
The switch sends the Accounting-On packet to the CAMS at regular intervals.
■
Once the CAMS receives the Accounting-On packet, it sends a response to the
■
switch. At the same time it finds and deletes the existing online information of the
users who were accessing the network through the switch before the reboot
based on the NAS-ID, NAS-IP and session ID contained in the Accounting-On
packet, and ends the charging of the users according to the last accounting
update packet.
Once the switch receives the response from the CAMS, it stops sending other
■
Accounting-On packets.
If the switch has tried the set maximum times to transmit the Accounting-On
■
packet but still does not receive any response from the CAMS, it stops the sending
of the Accounting-On packet.
Command
retry stop-accounting
retry_times
undo retry stop-accounting
Command
accounting optional
undo accounting optional