R0106-HP MSR Router Series Security Command Reference(V7)

73
This command can affect the RADIUS server status detection function when a valid test profile is specified
for a secondary RADIUS authentication server.
• If you set the status of the server to blocked, the device stops detecting the status of the server.
• If you set the status of the server to active, the device starts to detect the status of the server.
Examples
# Set the status of all the secondary authentication servers in RADIUS scheme radius1 to blocked.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] state secondary authentication block
Related commands
• display radius scheme
• radius-server test-profile
• state primary
timer quiet (RADIUS scheme view)
Use timer quiet to set the quiet timer for the servers specified in an RADIUS scheme.
Use undo timer quiet to restore the default.
Syntax
timer quiet minutes
undo timer quiet
Default
The server quiet period is 5 minutes.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
minutes: Specifies the server quiet period in minutes, in the range of 1 to 255.
Usage guidelines
Make sure the server quiet timer is set correctly.
• A timer that is too short might result in frequent authentication or accounting failures. The reason is
that the device will continue to attempt to communicate with an unreachable server that is in active
state.
• A timer that is too long might temporarily block a reachable server that has recovered from a failure.
The reason is that the server will remain in blocked state until the timer expires.
Examples
# Set the quiet timer for the servers to 10 minutes.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] timer quiet 10