R21xx-HP FlexFabric 11900 Security Command Reference

40
Related commands
• radius scheme
• timer response-timeout (RADIUS scheme view)
retry realtime-accounting
Use retry realtime-accounting to set the maximum number of accounting attempts.
Use undo retry realtime-accounting to restore the default.
Syntax
retry realtime-accounting retry-times
undo retry realtime-accounting
Default
The maximum number of accounting attempts is 5.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
retry-times: Maximum number of accounting attempts, in the range of 1 to 255.
Usage guidelines
A RADIUS accounting server usually checks whether a user is online by using a timeout timer. If it does
not receive a real-time accounting request for a user in the timeout period from the NAS, it considers that
there may be line or device failures and stops accounting for the user. This may happen when some
unexpected failure occurs. To cooperate with the RADIUS server, the NAS needs to send real-time
accounting requests to the server before the timer on the server expires and to keep pace with the server
in disconnecting the user when a failure occurs. The maximum number of accounting attempts, together
with some other parameters, controls how the NAS sends accounting requests and enables the NAS to
disconnect the user when a failure occurs.
Suppose that the RADIUS server response timeout period is 3 seconds (set with the timer
response-timeout command), the maximum number of RADIUS packet transmission attempts is three (set
with the retry command), the real-time accounting interval is 12 minutes (set with the timer
realtime-accounting command), and the maximum number of accounting attempts is five (set with the
retry realtime-accounting command). In this case, the device generates an accounting request every 12
minutes, and retransmits the request if it sends the request but does not receive a response within 3
seconds. If the device does not receive a response after transmitting the request three times, it considers
the accounting attempt a failure, and makes another accounting attempt. If five consecutive accounting
attempts fail, the device cuts the user connection.
Examples
# Set the maximum number of accounting attempts to 10 for RADIUS scheme radius1.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] retry realtime-accounting 10