42
• When an HWTACACS server's status changes automatically, the device changes this server's
status accordingly in all HWTACACS schemes in which this server is specified.
To set HWTACACS timers:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter HWTACACS scheme
view.
hwtacacs scheme
hwtacacs-scheme-name
N/A
3. Set the HWTACACS server
response timeout timer.
timer response-timeout
seconds
By default, the HWTACACS
server response timeout timer is 5
seconds.
4. Set the real-time accounting
interval.
timer realtime-accounting
minutes
By default, the real-time
accounting interval is 12 minutes.
A short interval helps improve
accounting precision but requires
many system resources. When
there are 1000 or more users, set
a longer interval.
5. Set the server quiet timer.
timer quiet
minutes
By default, the server quiet timer
is 5 minutes.
Displaying and maintaining HWTACACS
Execute display commands in any view and reset commands in user view.
Task Command
Display the configuration or server
statistics of HWTACACS schemes.
display hwtacacs scheme
[ hwtacacs-scheme-name
[
statistics
] ]
Display information about buffered
HWTACACS stop-accounting requests
to which no responses have been
received.
display stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name
Clear HWTACACS statistics.
reset hwtacacs statistics
{
accounting
|
all
|
authentication
|
authorization
}
Clear the buffered HWTACACS
stop-accounting requests to which no
responses have been received.
reset stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name
Configuring LDAP schemes
Configuration task list
Tasks at a glance
Configuring an LDAP server:
• (Required.) Creating an LDAP server
• (Required.) Configuring the IP address of the LDAP server
• (Optional.) Specifying the LDAP version
• (Optional.) Setting the LDAP server timeout period
• (Required.) Configuring administrator attributes
• (Required.) Configuring LDAP user attributes