R3303-HP HSR6800 Routers Security Command Reference

87
Parameters
seconds: RADIUS server response timeout period in seconds, ranging from 1 to 10.
Usage guidelines
If a NAS receives no response from the RADIUS server in a period of time after sending a RADIUS request
(authentication/authorization or accounting request), it resends the request so that the user has more
opportunity to obtain the RADIUS service. The NAS uses the RADIUS server response timeout timer to
control the transmission interval.
The maximum number of RADIUS packet transmission attempts multiplied by the RADIUS server response
timeout period cannot be greater than 75.
Examples
# Set the RADIUS server response timeout timer to 5 seconds for RADIUS scheme radius1.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] timer response-timeout 5
Related commands
retry
user-name-format (RADIUS scheme view)
Use user-name-format to specify the format of the username to be sent to a RADIUS server.
Syntax
user-name-format { keep-original | with-domain | without-domain }
Default
The ISP domain name is included in the username.
Views
RADIUS scheme view
Default command level
2: System level
Parameters
keep-original: Sends the username to the RADIUS server as it is entered.
with-domain: Includes the ISP domain name in the username sent to the RADIUS server.
without-domain: Excludes the ISP domain name from the username sent to the RADIUS server.
Usage guidelines
A username is generally in the format userid@isp-name, of which isp-name is used by the device to
determine the ISP domain to which a user belongs. Some earlier RADIUS servers, however, cannot
recognize a username including an ISP domain name. Before sending a username including a domain
name to such a RADIUS server, the device must remove the domain name. This command allows you to
specify whether to include a domain name in a username to be sent to a RADIUS server.
If a RADIUS scheme defines that the username is sent without the ISP domain name, do not apply the
RADIUS scheme to more than one ISP domain, avoiding the confused situation where the RADIUS server
regards two users in different ISP domains but with the same userid as one.