HP 3600 v2 Series Security Configuration Guide

38
To do… Use the command… Remarks
Specify a source IP address for
outgoing HWTACACS packets
hwtacacs nas-ip ip-address
[ vpn-instance
vpn-instance-name ]
Required
By default, the IP address of the outbound
interface is used as the source IP address.
Follow these steps to specify a source IP address for a specific HWTACACS scheme:
To do… Use the command… Remarks
Enter system view system-view —
Enter HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
—
Specify a source IP address for
outgoing HWTACACS packets
nas-ip ip-address
Required
By default, the IP address of the outbound
interface is used as the source IP address.
Setting timers for controlling communication with HWTACACS servers
The switch uses the following timers to control the communication with an HWTACACS server:
• Server response timeout timer (response-timeout)—Defines the HWTACACS request retransmission
interval. After sending an HWTACACS request (authentication, authorization, or accounting
request), the switch starts this timer. If the switch receives no response from the server before this
timer expires, it resends the request.
• Server quiet timer (quiet)—Defines the duration to keep an unreachable server in blocked state. If
a server is not reachable, the switch changes the server’s status to blocked, starts this timer for the
server, and tries to communicate with another server in active state. After this timer expires, the
switch changes the status of the server back to active.
• Real-time accounting timer (realtime-accounting)—Defines the interval at which the switch sends
real-time accounting updates to the HWTACACS accounting server for online users. To implement
real-time accounting, the switch must send real-time accounting packets to the accounting server for
online users periodically.
Follow these steps to set timers for controlling communication with HWTACACS servers:
To do… Use the command… Remarks
Enter system view system-view —
Enter HWTACACS scheme view
hwtacacs scheme
hwtacacs-scheme-name
—
Set the HWTACACS server
response timeout timer
timer response-timeout seconds
Optional
5 seconds by default
Set the quiet timer for the primary
server
timer quiet minutes
Optional
5 minutes by default
Set the real-time accounting
interval
timer realtime-accounting minutes
Optional
12 minutes by default
NOTE:
The setting of the real-time accountin
g
interval somewhat depends on the performance of the NAS and the
HWTACACS server. A shorter interval requires higher performance.

HP 3600 v2 Series Specifications

General

Brand	HP
Model	3600 v2 Series
Category	Switch
Language	English