R3166-R3206-HP High-End Firewalls Access Control Configuration Guide-6PW101

150
Task Remarks
Realtime-Accounting Interval
Set the real-time accounting interval, whose value must be a multiple
of 3.
To implement real-time accounting for users, you must set the real-time
accounting interval. With this parameter specified, the firewall sends
the accounting information of online users to the TACACS server at
the specified interval.
The value of the real-time accounting interval is related to the
requirement on the performance of the NAS and TACACS server.
The smaller the value, the higher the requirement. Table 49 shows the
relationship between the recommended interval value and the
number of users.
If you leave this text box blank, the real-time accounting interval is
restored to the default value.
Stop-Accounting Buffer
Enable or disable buffering of stop-accounting requests without
responses in the firewall.
Stop-Accounting Packet Retransmission
Times
Set the maximum number of stop-accounting packet transmission
attempts if no response is received for the stop-accounting packet
If stop-accounting buffer is disabled, this value is ineffective.
If you leave this text box blank, the number of retransmission times is
restored to the default value.
Response Timeout Interval
Set the TACACS server response timeout time.
If no response is received from the server within the timeout interval,
it may lead to disconnection from the TACACS server.
If you leave this text box blank, the response timeout period is
restored to the default value.
Quiet Interval
Specify the interval the primary server has to wait before being
active.
If you leave this text box blank, the quiet interval is restored to the
default value.
Username Format
Set the format of the username sent to the TACACS server.
A username is generally in the format of userid@isp-name, of which
isp-name is used by the firewall to determine the ISP domain to which
the user belongs. If a TACACS server does not accept a username
including an ISP domain name, you can configure the firewall to
remove the domain name before sending it to the TACACS server.
• without-domain: Specifies to remove the domain name of a
username that is to be sent to the RADIUS server.
• with-domain: Specifies to keep the domain name of a username
that is to be sent to the RADIUS server.
Unit of Data Flows
Specify the unit for data flows sent to the TACACS server (used for
traffic accounting), which can be
• byte
• kilo-byte
• mega-byte
• giga-byte
If you leave the box blank, the default unit is used.