Configuring HWTACACS 771
■ To configure the maximum number of retransmission attempts of RADIUS
packets, refer to the command retry in the command manual.
Configuring RADIUS
Accounting-on
With the accounting-on function enabled, a device sends, whenever it reboots,
accounting-on packets to the RADIUS server, requesting the server to force its
users offline.
Once configured, the accounting-on function is executed as soon as the device
restarts and completes its configuration. In case that the majority of the RADIUS
servers (a device can be configured with 16 schemes at most) fail to respond to the
accounting-on packets, the number of accounting-on packet retransmission
attempts is too big, or the accounting-on packet retransmission interval is too
long, the device will not handle AAA services until all these packets are
retransmitted and all RADIUS servers have responded to accounting-on packets.
Follow these steps to configure accounting-on function of a RADIUS server:
n
If the system has no authentication scheme enabled with the accounting-on
function when you execute the accounting-on enable command, you need to
save the configuration and restart the device so that the command takes effect.
Otherwise, the command takes effect immediately.
Enabling the Listening
Port of the RADIUS
Client
Follow these steps to enable the listening port of the RADIUS client:
Configuring
HWTACACS
Creating a HWTACAS
scheme
The HWTACACS protocol is configured on a per scheme basis. Before performing
other HWTACACS configurations, follow these steps to create a HWTACACS
scheme and enter HWTACACS scheme view:
To do… Use the command… Remarks
Enter system view system-view -
Create RADIUS scheme and
enter its view
radius scheme
radius-scheme-name
Required
Not defined by default
Enable accounting-on accounting-on enable Required
Disabled by default
Set the number of
accounting-on packet
retransmission attempts
accounting-on enable send
send-times
Optional
5 times by default
Set the retransmission interval
of accounting-on packets
accounting-on enable
interval seconds
Optional
3 seconds by default
To do… Use the command… Remarks
Enter system view system-view -
Enable the listening port of
the RADIUS client
radius client enable Optional
Enabled by default
To Next Page
Loading...
