H3C S7500E Series Operation Manual page 865

Operation Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Specify the primary
RADIUS accounting
server
Specify the secondary
RADIUS accounting
server
Enable the device to
buffer stop-accounting
requests getting no
responses
Set the maximum number
of stop-accounting
request transmission
attempts
Set the maximum number
of accounting request
transmission attempts
Note:
It is recommended to specify only the primary RADIUS accounting server if backup
is not required.
In practice, you can specify two RADIUS servers as the primary and secondary
accounting servers respectively; or specify one server to function as the primary
accounting server in a scheme and the secondary accounting server in another
scheme.. Besides, because RADIUS uses different UDP ports to receive
authentication/authorization
authentication/authorization must be different from that for accounting.
You can set the maximum number of stop-accounting request transmission buffer,
allowing the device to buffer and resend a stop-accounting request until it receives a
response or the number of transmission retries reaches the configured limit. In the
latter case, the device discards the packet.
You can set the maximum number of accounting request transmission attempts on
the device, allowing the device to disconnect a user when the number of accounting
request transmission attempts for the user reaches the limit but it still receives no
response to the accounting request.
The IP addresses of the primary and secondary accounting servers cannot be the
same. Otherwise, the configuration fails.
Currently, RADIUS does not support keeping accounts on FTP users.
To do...
primary accounting
ip-address [ port-number ]
secondary accounting
ip-address [ port-number ]
stop-accounting-buffer
enable
retry stop-accounting
retry-times
retry
realtime-accounting
retry-times
Chapter 1 AAA/RADIUS/HWTACACS
Use the command...
and accounting
1-25
Configuration
Remarks
Required
Use either approach
By default, neither the
primary nor the secondary
accounting server is
specified
Optional
Enabled by default
Optional
500 by default
Optional
5 by default
packets, the port for