Configuring The User Re-Authentication Upon Device Restart Function - H3C S7500 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Table 1-21 Set the timers of RADIUS server
To do...
Enter system view
Create a RADIUS
scheme and enter its
view
Set the response
timeout time of
RADIUS servers
Set the wait time for
the primary server to
restore the active
state
Set the real-time
accounting interval

1.4.11 Configuring the User Re-Authentication upon Device Restart Function

Note:
The function applies to the environment where the RADIUS authentication/accounting
server is CAMS.
In an environment with a CAMS server, if the switch reboots after an exclusive user (a
user whose concurrent online number is set to 1 on the CAMS) gets authenticated and
authorized and begins being charged, the CAMS will give a prompt that the user has
already been online when the user re-logs in to the switch before CAMS performs
online user detection, and the user cannot get authenticated. In this case, the user can
access the network again only after the CAMS administrator manually removes the
online information of the user.
The user re-authentication upon device restart function is designed to resolve the
above problem. After this function is enabled, every time the switch restarts:
Use the command...
system-view
radius scheme
radius-scheme-name
timer response-timeout
seconds
timer seconds
timer quiet minutes
timer
realtime-accounting
minutes
1-31
Chapter 1 AAA & RADIUS & HWTACACS
Remarks
—
Required
By default, a RADIUS scheme
named system has already
been created in the system.
Optional
By default, the response
timeout timer of RADIUS
servers expires in three
seconds.
Optional
By default, the primary server
waits five minutes before
restoring the active state.
Optional
By default, the real-time
accounting interval is 12
minutes.
Configuration