R3102-R3103-HP 6600/HSR6600 Routers Security Configuration Guide

44
• Server response timeout timer (response-timeout)—Defines the HWTACACS request
retransmission interval. After sending an HWTACACS request (authentication, authorization, or
accounting request), the device starts the server response timeout timer. If the device receives no
response from the server before the timer expires, it resends the request.
• Primary server quiet timer (quiet)—Defines the duration to keep an unreachable primary server in
blocked state. If a primary server is not reachable, the device changes the server's status to blocked,
starts this timer for the server, and tries to communicate with the secondary server if the secondary
server is configured and in active state. After the primary server quiet timer expires, the device
changes the status of the primary server back to active.
• Real-time accounting timer (realtime-accounting)—Defines the interval at which the device sends
real-time accounting updates to the HWTACACS accounting server for online users. To implement
real-time accounting, the device must send periodically real-time accounting packets to the
accounting server for online users.
Consider the performance of the NAS and the HWTACACS server when you set the real-time accounting
interval. A shorter interval requires higher performance.
To set HWTACACS timers:
Ste
p
Command Remarks
1. Enter system view.
system-view
N/A
2. Enter HWTACACS scheme
view.
hwtacacs scheme
hwtacacs-scheme-name
N/A
3. Set the HWTACACS server
response timeout timer.
timer response-timeout seconds
Optional.
The default HWTACACS server
response timeout timer is 5
seconds.
4. Set the quiet timer for the
primary server.
timer quiet minutes
Optional.
The default quiet timer for the
primary server is 5 minutes.
5. Set the real-time accounting
interval.
timer realtime-accounting minutes
Optional.
The default real-time accounting
interval is 12 minutes.
Displaying and maintaining HWTACACS
Task Command Remarks
Display the configuration or statistics of
HWTACACS schemes.
display hwtacacs [ hwtacacs-scheme-name
[ statistics ] ] [ slot slot-number ] [ | { begin |
exclude | include } regular-expression ]
Available in
any view.
Display information about buffered
stop-accounting requests for which no
responses have been received.
display stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name [ slot slot-number ] [ |
{ begin | exclude | include } regular-expression ]
Available in
any view.
Clear HWTACACS statistics.
reset hwtacacs statistics { accounting | all |
authentication | authorization } [ slot slot-number ]
Available in
user view.
Clear buffered stop-accounting
requests that get no responses.
reset stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name [ slot slot-number ]
Available in
user view.