3Com Switch 8800 Family Firewall Module Configuration and Command Reference Guide

Configuring the RADIUS Protocol 41
terminates a user connection if it receives no response after the number of
transmitted real-time accounting requests exceeds the configured limit.
You can use the following command to set the maximum number of real-time
accounting request attempts.
Perform the following configuration in RADIUS view.
By default, the maximum number of real-time accounting request attempts is 5.
Setting the Shared Key
for RADIUS Packet
Encryption
The RADIUS client (the security gateway) and RADIUS server use the MD5
algorithm to hash the exchanged packets between them. The two ends verify the
packets using a shared key. Only when the same key is used can they properly
receive the packets and make responses.
Perform the following configurations in RADIUS view.
By default, the shared key 3com is used for RADIUS authentication/authorization
and accounting packet encryption.
Setting the Maximum
Number of RADIUS
Request Attempts
Since RADIUS uses UDP packets to carry data, the communication process is not
reliable. If the RADIUS server does not respond to the NAS before the response
timer times out, the NAS should retransmit the RADIUS request. After the number
of transmission attempts exceeds the specified retry-times, the NAS considers the
communication with the current RADIUS server has been disconnected and turns
to another RADIUS server.
You can use the following command to set the maximum number of allowed
RADIUS request attempts.
Perform the following configurations in RADIUS view.
Tab le 28 Set the maximum number of real-time accounting request attempts
Operation Command
Set the maximum number of real-time
accounting request attempts.
retry realtime-accounting retry-times
Restore the default maximum number of
real-time accounting request attempts.
undo retry realtime-accounting
Tab le 29 Set the shared key for RADIUS packet encryption
Operation Command
Set the shared key for RADIUS
authentication/authorization packet
encryption.
key authentication string
Restore the default shared key for RADIUS
authentication/authorization packet
encryption.
undo key authentication
Set the shared key for RADIUS accounting
packet encryption.
key accounting string
Restore the default shared key for RADIUS
accounting packet encryption.
undo key accounting