HPE FlexNetwork MSR Series User Manual

314
Item Description
Authentication Key
Confirm Authentication Key
Accounting Key
Confirm Accounting Key
Set the shared key for authenticating RADIUS authentication packets and
that for authenticating RADIUS accounting packets.
The RADIUS client and the RADIUS server use MD5 to encrypt RADIUS
packets. They verify packets through the specified shared key. The client
and the server can receive and respond to packets from each other only
when they use the same shared key.
IMPORTANT:
The shared keys configured in the common configuration part are used
only when no corresponding shared keys are configured in the RADIUS
server configuration part.
Quiet Time
Set the time to wait before the device restores an unreachable RADIUS
server to active state.
If the primary server is unreachable due to temporary interruption on the
network interface or the busy server, you can set the quiet time to 0 so that
authentication and accounting requests for other users are still sent to the
primary server for processing. When the quiet time is 0, if the server being
used is unreachable, the device keeps the server in the active state, and
sends the request to the next server in the active state. In this way,
subsequent authentication or accounting requests may still be sent to the
server.
Server Response Timeout
Time
Set the RADIUS server response timeout time.
If the device sends a RADIUS request to a RADIUS server but receives no
response in the specified server response timeout time, it retransmits the
request. Setting a proper value according to the network conditions helps
in improving the system performance.
Request Transmission
Attempts
Set the maximum number of attempts for transmitting a RADIUS packet to
a single RADIUS server. If the device does not receive a response to its
request from the RADIUS server within the response timeout period, it
retransmits the RADIUS request. If the number of transmission attempts
exceeds the limit but the device still does not receive a response from the
RADIUS server, the device considers the request a failure.
IMPORTANT:
The server response timeout time multiplied by the maximum number of
RADIUS packet transmission attempts must not exceed 75.
Realtime Accounting Interval
Set the interval for sending real-time accounting information to the
RADIUS accounting server. The interval must be a multiple of 3.
Different real-time accounting intervals impose different performance
requirements on the NAS and the RADIUS server. A shorter interval helps
achieve higher accounting precision but requires higher performance. Use
a longer interval when a large number of users (1000 or more) exist. For
more information about the recommended real-time accounting intervals,
see "
Configuration guidelines
."
Realtime Accounting Attempts
Set the maximum number of attempts for sending a real-time accounting
request.
Unit for Data Flows
Specify the unit for data flows sent to the RADIUS server:
byte
,
kilo-byte
,
mega-byte
, or
giga-byte
.
Unit for Packets
Specify the unit for data packets sent to the RADIUS server:
one-packet
,
kilo-packet
,
mega-packet
, or
giga-packet
.
VPN
Specify the VPN to which the RADIUS scheme belongs.
This setting is effective to all RADIUS authentication servers and
accounting servers configured in the RADIUS scheme, but the VPN
individually specified for a RADIUS authentication or accounting server
takes priority.

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English