3Com Switch 4800G 24-Port Configuration Manual page 770

770 C 53: AAA/RADIUS/HWTACACS C
HAPTER
Setting Timers
Regarding RADIUS
Servers
n
ONFIGURATION
command is thus provided for you to decide whether to include a domain
name in a username to be sent to a RADIUS server.
If a RADIUS scheme defines that the username is sent without the ISP domain
■
name, do not apply the RADIUS scheme to more than one ISP domain, thus
avoiding the confused situation where the RADIUS server regards two users in
different ISP domains but with the same userid as one.
The nas-ip command in RADIUS scheme view is only for the current RADIUS
■
scheme, while the radius nas-ip command in system view is for all RADIUS
schemes. However, the nas-ip command in RADIUS scheme view overwrites
the configuration of the radius nas-ip command.
There are three timers regarding RADIUS servers:
RADIUS server response timeout (response-timeout): If a NAS receives no
■
response from the RADIUS server in a period of time after sending a RADIUS
request (authentication/authorization or accounting request), it has to resend
the request so that the user has more opportunity to obtain the RADIUS
service. The NAS uses the RADIUS server response timeout timer to control the
transmission interval.
Primary server quiet timer (timer quiet): If the primary server is not reachable,
■
its state changes to blocked, and the device will communicate with the
secondary server with an IP address configured. If the secondary server is
reachable, the primary server will resume active after the period specified by
this timer, and the secondary server's state does not change.
Real-time accounting interval (realtime-accounting): This timer defines the
■
interval for performing real-time accounting of users. After this timer is set, the
switch will send accounting information of online users to the RADIUS server at
the specified interval.
Follow these steps to set timers regarding RADIUS servers:
To do...
Enter system view
Create a RADIUS scheme and
enter RADIUS scheme view
Set the RADIUS server
response timeout timer
Set the quiet timer for the
primary server
Set the real-time accounting
interval
The product of the maximum number of retransmission attempts of RADIUS
■
packets and the RADIUS server response timeout period cannot be greater
than 75. This product is also the upper limit of the timeout time of different
access modules.
For an access module, the product of the RADIUS server response timeout
■
period and the maximum number of retransmission attempts must be smaller
than the timeout time.
Use the command...
system-view
radius scheme
radius-scheme-name
timer response-timeout
seconds
timer quiet minutes
timer realtime-accounting
minutes
Remarks
-
Required
Not defined by default
Optional
3 seconds by default
Optional
5 minutes by default
Optional
12 minutes by default