212 CHAPTER 11: 802.1X CONFIGURATION
RADIUS protocol uses different UDP ports to receive/transmit
authentication/authorization and accounting packets, you need to set two
different ports accordingly. Suggested by RFC2138/2139,
authentication/authorization port number is 1812 and accounting port number is
1813. However, you may use values other than the suggested ones. (Especially for
some earlier RADIUS Servers, authentication/authorization port number is often
set to 1645 and accounting port number is 1646.)
The RADIUS service port settings on the Switch 4500 units are supposed to be
consistent with the port settings on RADIUS server. Normally, RADIUS accounting
service port is 1813.
Setting the Maximum Times of Real-time Accounting Request Failing to be
Responded to
A RADIUS server usually checks if a user is online with a timeout timer. If the
RADIUS server has not received the real-time accounting packet from NAS for a
while, it will consider that there is device failure and stop accounting. It is
necessary to disconnect the user at the NAS end and on the RADIUS server
synchronously when some unpredictable failure occurs. The Switch allows you to
set the maximum number of times of a real-time accounting request failing to be
responded to. NAS will disconnect the user if it has not received a real-time
accounting response from the RADIUS server for the specified number of times.
You can use the following command to set the maximum number of times of a
real-time accounting request failing to be responded to.
Perform the following configurations in RADIUS Scheme View.
Table 223 Setting the Maximum Times of Real-time Accounting Request Failing to be
Responded
How to calculate the value of retry-times? Suppose that RADIUS server
connection will timeout in T and the real-time accounting interval of NAS is t, then
the integer part of the result from dividing T by t is the value of
count. Therefore,
when applied, it is suggested that T should be a number that can be divided
exactly by t.
By default, the real-time accounting request can fail to be responded to no more
than 5 times.
Enabling/Disabling the Stopping Accounting Request Buffer
Because the stopping accounting request concerns the account balance and will
affect the amount of charge, which is very important for both the subscribers and
the ISP, NAS shall make its best effort to send the message to the RADIUS
accounting server. If the message from the Switch to the RADIUS accounting
server has not been responded to, the Switch will save it in the local buffer and
retransmit it until the server responds or discards the messages after transmitting
for the specified number of times. The following command can be used for setting
to save the message or not.
Operation Command
Set maximum times of real-time accounting
request failing to be responded
retry realtime-accounting
retry_times
Restore the maximum times to the default value undo retry realtime-accounting
To Next Page
Loading...
Need help?
General