3Com Switch 7700 Configuration Manual page 312

304 C 9: AAA
HAPTER AND
RADIUS O
PERATION
Setting the RADIUS Packet Encryption Key
RADIUS client (switch system) and RADIUS server use MD5 algorithm to encrypt
the exchanged packets. The two ends verify the packet by setting the encryption
key. Only when the keys are identical can both ends accept the packets from each
other and give a response.
Perform the following configurations in RADIUS server group view.
Table 21 Set RADIUS Packet Encryption Key
Operation
Set RADIUS authentication/authorization
packet encryption key
Restore the default RADIUS
authentication/authorization packet
encryption key.
Set RADIUS accounting packet key
Restore the default RADIUS accounting packet
key
Setting the Response Timeout Timer of RADIUS Server
RADIUS (authentication/authorization or accounting) request packet is transmitted
for a specific period of time. If NAS has not received the response from RADIUS
server, it has to retransmit the request to guarantee RADIUS service for the user.
Perform the following configurations in RADIUS server group view.
Table 22 Set Response Timeout Timer of RADIUS Server
Operation
Set response timeout timer of RADIUS server
Restore the response timeout timer of RADIUS
server to default value
By default, timeout timer of RADIUS server is 3 seconds.
Setting Retransmission Times of the RADIUS Request Packet
Since RADIUS protocol uses UDP packets to carry the data, the communication
process is not reliable. If the RADIUS server has not responded to NAS before
timeout, NAS has to retransmit the RADIUS request packet. If it transmits the
packet for more than retry-time, and RADIUS server still has not given any
response, NAS considers the communication with the current RADIUS server
disconnected and will transmit the request packet to other RADIUS servers.
Perform the following configurations in RADIUS server group view.
Table 23 Set Retransmission Times of RADIUS Request Packet
Operation
Set retransmission times of RADIUS request
packet
Restore the default value of retransmission
times
Command
key authentication string
undo key authentication
key accounting string
undo key accounting
Command
timer second
undo timer
Command
retry retry-time
undo retry