Operation Manual - Security
Quidway S6500 Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol
Configuration
Huawei Technologies Proprietary
2-25
When there are a large amount of users (more than 1000, inclusive), we suggest a
larger value. The following table recommends the ratio of minutes value to the number
of users.
Table 2-35 Recommended ratio of minutes to number of users
Number of users Real-time accounting interval (minute)
1 to 99 3
100 to 499 6
500 to 999 12
≥1000 ≥15
By default, minutes is set to 12 minutes.
III. Configure the RADIUS Server Response Timer
If the NAS receives no response from the RADIUS server after sending a RADIUS
request (authentication/authorization or accounting request) for a period of time, the
NAS resends the request, thus ensuring the user can obtain the RADIUS service. You
can specify this period by setting the RADIUS server response timeout timer, taking into
consideration the network condition and the desired system performance.
Perform the following configurations in RADIUS scheme view.
Table 2-36 Configure the RADIUS server response timer
Operation Command
Configure the RADIUS server response
timer
timer response-timeout seconds
Restore the default value of the interval
undo timer response-timeout
By default, the response timeout timer for the RADIUS server is set to three seconds.
IV. Configuring the Quiet Time Interval
You can use the following command to set the quiet time interval after which the
primary and secondary RADIUS servers switch over. The functions of the quiet time
interval are as follows:
z The switch sends RADIUS packets to the primary RADIUS server.
z If the switch affirms that the primary server does not respond, it then sends
RADIUS packets to the secondary RADIUS server.
z After each quiet time interval, the switch sets the status of the primary RADIUS
server to active, and sends RADIUS packets to it next time.
Perform the following configuration in RADIUS scheme view.
To Next Page
Loading...
Need help?
General
