Cisco TrustSec - Page 121

7-35
Cisco TrustSec Configuration Guide
OL-22192-01
Chapter 7 Cisco TrustSec Command Summary
cts server
cts server
To configure RADIUS server group load balancing, use the cts server command in global configuration
mode. Use the no form of the command to disable load balancing.
[no] cts server deadtime timer_secs
[no] cts server key-wrap enable
[no] cts server load-balance method least-outstanding [batch-size transactions]
[ignore-preferred-server]
[no] cts server test {ip4_address | all} {deadtime seconds | enable | idle-time minutes}
Syntax Description
Defaults
deadtime timer_secs Specifies how long a server in the group should not be
selected for service once it has been marked as dead. The
default is 20 seconds; the range is 1 to 864000.
load-balance method least-outstanding Enables RADIUS load balancing for the Cisco TrustSec
private server group and chooses the server with the least
outstanding transactions. By default, no load balancing is
applied.
batch-size transactions (Optional) The number of transactions to be assigned per
batch. The default transactions is 25.
Note Batch size may impact throughput and CPU load.
It is recommended that the default batch size, 25,
be used because it is optimal for high throughput,
without adversely impacting CPU load.
ignore-preferred-server (Optional) Instructs the switch not to try to use the same
server throughout a session.
test {ip4_address | all {deadtime seconds
| enable | idle-time minutes } }
Configures the server-liveliness test for a specified
RADIUS server or for all servers on the dynamic server
list. By default, the test is enabled for all servers. The
default deadtime is 20 seconds; the range is 1 to 864000
seconds. The default idle-time is 60 seconds; the range is
from 1 to 14400 seconds.
key-wrap enable Enables AES Key Wrap encryption for Trustsec RADIUS
server communications.
Deadtime 20 seconds
Batch-size 25 transactions
test idle-time 60 seconds