Huawei Quidway S6500 Series User Manual

Operation Manual - Security
Quidway S6500 Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol
Configuration
Huawei Technologies Proprietary
2-19
You can use the following command to set retransmission times of RADIUS request
packet.
Perform the following configurations in RADIUS scheme view.
Table 2-24 Setting retransmission times of RADIUS request packet
Operation Command
Set retransmission times of RADIUS request packet
retry retry-times
Restore the default value of retransmission times
undo retry
By default, RADIUS request packet will be retransmitted up to three times.
2.3.6 Configuring the User Re-authentication at Reboot
I. Overview
Exclusive users are those with its concurrent online number set to 1 on the CAMS. In
the AAA solution implemented jointly by the switch and CAMS, if the switch reboots
after a user passes the authentication/authorization and begins being accounted, the
switch prompts that the user has been online when the user logs into the switch before
CAMS makes online detection. Therefore, the user cannot access network resources
normally. The user can access the network only after the network administrator deletes
manually the online information of the user.
To solve this problem, user re-authentication at reboot is designed. When this function
is enabled, each time the switch reboots,
z The switch generates an Accounting-On message, which mainly includes NAS-ID,
NAS-IP (source IP) and session ID.
z The switch sends to CAMS an Accounting-On message.
z Upon receiving the Accounting-On message, CAMS detects and deletes the
existing online information of the user based on the NAS-ID, NAS-IP (source IP)
and session ID in the Accounting-On message.
 Note:
The main attributes of the Accounting-On message –– NAS-ID, NAS-IP and session ID
are often generated automatically by the switch. However, you can configure the
NAS-IP using the nas-ip command. Make sure you set a correct and valid NAS-IP
address. Otherwise, the switch automatically selects the IP address of the virtual VLAN
interface as NAS-IP.

Huawei Quidway S6500 Series Specifications

General

Brand	Huawei
Model	Quidway S6500 Series
Category	Network Router
Language	English