4000 Router Series Security Configuration Guide

Enabling the session-control feature

A RADIUS server running on IMC can use session-control packets to inform disconnect or dynamic

authorization change requests. This task enables the device to receive RADIUS session-control packets on

UDP port 1812.

To enable the session-control feature:

Ste

Command

Remarks

1. Enter system view.

system-view N/A

2. Enable the session-control

feature.

radius session-control enable

By default, the session-control

feature is disabled.

Setting the maximum number of concurrent login

users

Perform this task to set the maximum number of concurrent users who can log on to the device through a

specific protocol, including FTP, SSH, and Telnet, regardless of their authentication methods: no

authentication, local authentication, or remote authentication.

To set the maximum number of concurrent login users:

Step Command Remarks

1. Enter system view.

system-view N/A

2. Set the maximum number of

concurrent login users.

• In non-FIPS mode:

aaa session-limit { ftp | ssh |

telnet } max-sessions

• In FIPS mode:

aaa session-limit ssh

max-sessions

By default, the maximum number of

concurrent login users is 16 for

each user type.

Displaying and maintaining AAA

Execute the display command in any view.

Task Command

Display the configuration of ISP domains. display domain [ isp-name ]