Displaying And Debugging Hwtacacs Protocol - 3Com 5500-SI Configuration Manual

620 C 33: HWTACACS C
HAPTER
Displaying and
Debugging
HWTACACS Protocol
ONFIGURATION
The setting of real-time accounting interval somewhat depends on the performance
of the NAS and the TACACS server: a shorter interval requires higher device
performance. You are therefore recommended to adopt a longer interval when there
are a large number of users (more than 1000, inclusive). Table 683 lists the numbers
of users and the recommended intervals.
Table 683 Numbers of users and the recommended intervals
Number of users
1–99
100–499
500–999
ƒ1000
The real-time accounting interval defaults to 12 minutes.
After the above configuration, execute display command in any view to display the
running of the AAA and RADIUS/HWTACACS configuration, and to verify the effect
of the configuration. Execute reset command in user view to reset AAA and
RADIUS/HWTACACS statistics, etc . Execute debugging command in user view to
debug AAA and RADIUS/HWTACACS.
Table 684 Displaying and debugging AAA and RADIUS/HWTACACS protocol
Operation
Display the configuration information of the
specified or all the ISP domains.
Display related information of user's
connection
Display related information of the local user
Display the statistics of local RADIUS
authentication server
Display the configuration information of
RADIUS schemes
Display the statistics of RADIUS packets
Display the stopping accounting requests
saved in buffer without response
Display the specified or all the HWTACACS
schemes
Display information on the stop-accounting
packets in the buffer
Delete the stopping accounting requests saved
in buffer without response
Reset the statistics of RADIUS server
Clear stop-accounting packets from the buffer reset stop-accounting-buffer
Real-time accounting interval (minutes)
3
6
12
ƒ15
Command
display domain [ isp-name ]
display connection [ access-type dot1x |
domain domain-name | interface interface-type
interface-number | ip ip-address | mac
mac-address | radius-scheme
radius-scheme-name | vlan vlanid | ucibindex
ucib-index | user-name user-name ]
display local-user [ domain isp-name | idle-cut
{ disable | enable } | service-type { telnet | ftp |
lan-access | ssh | terminal } | state { active |
block } | user-name user-name | vlan vlan-id ]
display local-server statistics
display radius [ radius-scheme-name ]
display radius statistics
display stop-accounting-buffer {
radius-scheme radius-scheme-name | session-id
session-id | time-range start-time stop-time |
user-name user-name }
display hwtacacs [ hwtacacs-scheme-name]
display stop-accounting-buffer
hwtacacs-scheme hwtacacs-scheme-name
reset stop-accounting-buffer { radius-scheme
radius-scheme-name | session-id session-id |
time-range start-time stop-time | user-name
user-name }
reset radius statistics
hwtacacs-scheme hwtacacs-scheme-name