F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

206
Examples
# Create a RADIUS scheme named radius1 and enter RADIUS scheme view.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1]
Related commands
display radius scheme
radius trap
Use radius trap to enable the trap function for RADIUS.
Use undo radius trap to disable the trap function for RADIUS.
Syntax
radius trap { accounting-server-down | authentication-error-threshold | authentication-server-down }
undo radius trap { accounting-server-down | authentication-error-threshold |
authentication-server-down }
Default
The trap function is disabled for RADIUS.
Views
System view
Default command level
2: System level
Parameters
accounting-server-down: Sends traps when the reachability of the accounting server changes.
authentication-error-threshold: Sends traps when the number of authentication failures exceed the
specified threshold. The threshold is represented by the ratio of the number of failed request transmission
attempts to the total number of transmission attempts. It ranges from 1 to 100 and defaults to 30. This
threshold can only be configured through the MIB.
authentication-server-down: Sends traps when the reachability of the authentication server changes.
Usage guidelines
With the trap function for RADIUS, a NAS sends a trap message in the following cases:
• When the status of a RADIUS server changes. If a NAS sends a request but receives no response
before the maximum number of attempts is exceeded, it places the server to the blocked state and
sends a trap message. If a NAS receives a response from a RADIUS server it considered
unreachable, it considers that the RADIUS server is reachable again and also sends a trap
message.
• When the ratio of the number of failed transmission attempts to the total number of authentication
request transmission attempts reaches the threshold.
Examples
# Enable the device to send traps in response to accounting server reachability changes.
<Sysname> system-view
[Sysname] radius trap accounting-server-down