R3166-R3206-HP High-End Firewalls Access Control Configuration Guide-6PW101

134
Table 48 RADIUS parameters
Task Remarks
Server Type
Type of the RADIUS server supported by the device, including:
• extended: Specifies an extended RADIUS server (usually a IMC server). That
is, the RADIUS client (the device) and RADIUS server communicate using the
proprietary RADIUS protocol and packet format.
• standard: Specifies a standard RADIUS server. That is, the RADIUS client (the
device) and RADIUS server communicate using the standard RADIUS protocol
and packet format defined in RFC 2138/2139 or later.
Authenticati
on/Account
ing Server
Shared Key
Key Shared key of the server
Confirm key Confirmed shared key, which must be consistent with the shared key
NAS-IP
Source IP address for the device to use in RADIUS packets to be sent to the
RADIUS server. Use a loopback interface address instead of a physical interface
address as the source IP address, because if the physical interface is down, the
response packets from the server cannot reach the device.
Timeout Interval RADIUS server response timeout
Timeout Retransmission
Times
Maximum transmission attempts
The product of the timeout value and the number of retransmission attempts
cannot exceed 75.
Realtime-Accounting
Interval
Real-time accounting interval, whose value must be n times 3 (n is an integer).
To implement real-time accounting on users, it is necessary to set the real-time
accounting interval. After this parameter is specified, the device will send the
accounting information of online users to the RADIUS server every the specified
interval.
The value of the real-time accounting interval is related to the requirement on the
performance of the NAS and RADIUS server. The smaller the value, the higher the
requirement. Set a large value if the number of users is equal to or larger than
1000. Table 49 shows the rel
ationship between the interval value and the
number of users.
Realtime-Accounting
Packet Retransmission
Times
The maximum number of real-time accounting request retransmission times
Stop-Accounting Buffer
Enable or disable buffering stop-accounting requests without responses in the
device
Stop-Accounting Packet
Retransmission Times
The maximum number of transmission attempts if no response is received for the
stop-accounting packet
Quiet Interval Specifies the interval the primary server has to wait before being active