3Com Switch 8800 Family Firewall Module Configuration and Command Reference Guide

256 CHAPTER 15: AAA/RADIUS/HWTACACS CONFIGURATION COMMANDS
Description
Use the timer response-timeout command and the timer command to
configure the RADIUS server response timer.
Use the undo timer command and the undo timer response-timeout
command to restore the default.
If the NAS receives no response from the RADIUS server after sending a RADIUS
request (authentication/authorization or accounting request) for a period, the NAS
resends the request, thus ensuring the user can obtain the RADIUS service. You
can specify this period by setting the RADIUS server response timeout timer using
the timer command and the timer response-timeout command, taking into
consideration the network condition and the desired system performance.
By default, the response timeout timer of the RADIUS server is three seconds.
Related command: radius scheme and retry.
Example
# Set the response timeout timer in the RADIUS scheme 3com to 5 seconds.
[SecBlade_FW-radius-3com] timer response-timeout 5
user-name-format Syntax
user-name-format { with-domain | without-domain }
View
RADIUS view
Parameter
with-domain: Includes the ISP domain name in the username sent to the RADIUS
server.
without-domain: Excludes the ISP domain name from the username sent to the
RADIUS server.
Description
Use the user-name-format command to configure the format of the username
to be sent to a RADIUS server.
By default, in system scheme, the NAS server sends user names without the ISP
domain name to the RADIUS server; in the newly added RADIUS scheme, the NAS
server sends user names with the ISP domain name to the RADIUS server.
The supplicants are generally named in the userid@isp-name format, of which
isp-name is used by the security gateway to decide the ISP domain to which a
supplicant belongs. Some earlier RADIUS servers however, cannot recognize
usernames including an ISP domain name. Before sending a username including a
domain name to such a RADIUS server, the security gateway must remove the
domain name. This command is thus provided for you to decide whether to
include a domain name in a username to be sent to a RADIUS server.