Setting Timers Regarding Radius Servers - H3C S7500E Series Operation Manual

Operation Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Note:
Some earlier RADIUS servers cannot recognize usernames that contain an ISP
domain name, therefore before sending a username including a domain name to
such a RADIUS server, the device must remove the domain name. This command
is thus provided for you to decide whether to include a domain name in a username
to be sent to a RADIUS server.
If a RADIUS scheme defines that the username is sent without the ISP domain
name, do not apply the RADIUS scheme to more than one ISP domain, thus
avoiding the confused situation where the RADIUS server regards two users in
different ISP domains but with the same userid as one.
The unit of data flows sent to the RADIUS server must be consistent with the traffic
statistics unit of the RADIUS server. Otherwise, accounting cannot be performed
correctly.
The nas-ip command in RADIUS scheme view is only for the current RADIUS
scheme, while the radius nas-ip command in system view is for all RADIUS
schemes. However, the nas-ip command in RADIUS scheme view overwrites the
configuration of the radius nas-ip command.

1.4.9 Setting Timers Regarding RADIUS Servers

There are three timers regarding RADIUS servers:
RADIUS server response timeout (response-timeout): If a NAS receives no
response from the RADIUS server in a period of time after sending a RADIUS
request (authentication/authorization or accounting request), it has to resend the
request so that the user has more opportunity to obtain the RADIUS service. The
NAS uses the RADIUS server response timeout timer to control the transmission
interval.
Primary server quiet timer (timer quiet): If the primary server is not reachable, its
state changes to blocked, and the device will communicate with the secondary
server with an IP address configured. If the secondary server is reachable, the
primary server will resume active after the period specified by this timer, and the
secondary server's state does not change.
Real-time accounting interval (realtime-accounting): This timer defines the
interval for performing real-time accounting of users. After this timer is set, the
switch will send accounting information of online users to the RADIUS server at
the specified interval.
Follow these steps to set timers regarding RADIUS servers:
Chapter 1 AAA/RADIUS/HWTACACS
1-30
Configuration