R211x-HP Flexfabric 11900 Security Command Reference

58
• Starts a quiet timer for the server.
• Tries to communicate with another secondary server in active state.
When the quiet timer of a server times out, the status of the server automatically changes to active. If you
set the status of the server to blocked before the quiet timer times out, the status of the server cannot
change back to active unless you manually set the status to active. If all configured secondary servers are
unreachable, the device considers the authentication or accounting attempt a failure.
Examples
# Set the status of all the secondary authentication servers in RADIUS scheme radius1 to blocked.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] state secondary authentication block
Related commands
• display radius scheme
• state primary
timer quiet (RADIUS scheme view)
Use timer quiet to set the quiet timer for the servers specified in an RADIUS scheme.
Use undo timer quiet to restore the default.
Syntax
timer quiet minutes
undo timer quiet
Default
The server quiet period is 5 minutes.
Views
RADIUS scheme view
Predefined user roles
network-admin
mdc-admin
Parameters
minutes: Specifies the server quiet period in minutes, in the range of 1 to 255.
Usage guidelines
Make sure the server quiet timer is set correctly.
• A timer that is too short might result in frequent authentication or accounting failures because the
device will continue to attempt to communicate with an unreachable server that is in active state.
• A timer that is too long might temporarily block a reachable server that has recovered from a failure,
because the server will remain in blocked state until the timer expires.
Examples
# Set the quiet timer for the servers to 10 minutes.
<Sysname> system-view