Configuring The Timers Regarding Tacacs Servers - H3C S5100-SI Operation Manual

Generally, the access users are named in the userid@isp-name or userid.isp-name format. Where,
isp-name after the "@" or "." character represents the ISP domain name. If the TACACS server does not
accept the usernames that carry ISP domain names, it is necessary to remove domain names from
usernames before they are sent to TACACS server.

Configuring the Timers Regarding TACACS Servers

Follow these steps to configure the timers regarding TACACS servers:
To do...
Enter system view
Create a HWTACACS scheme
and enter its view
Set the response timeout time
of TACACS servers
Set the time that the switch
must wait before it can restore
the status of the primary server
to active
Set the real-time accounting
interval
To control the interval at which users are charge in real time, you can set the real-time accounting
interval. After the setting, the switch periodically sends online users' accounting information to the
TACACS server at the set interval.
The real-time accounting interval must be a multiple of 3.
The setting of real-time accounting interval somewhat depends on the performance of the
TACACS client and server devices: A shorter interval requires higher device performance.
Use the command...
system-view
hwtacacs scheme
hwtacacs-scheme-name
timer response-timeout
seconds
timer quiet minutes
timer realtime-accounting
minutes
2-25
Remarks
—
Required
By default, no HWTACACS
scheme exists.
Optional
By default, the response
timeout time is five seconds.
Optional
By default, the switch must wait
five minutes before it can
restore the status of the primary
server to active.
Optional
By default, the real-time
accounting interval is 12
minutes.