H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-26
To do... Use the command... Remarks
Set a shared key for the
RADIUS accounting
packets
key accounting string
Required
Caution:
You need to set the share keys separately for the authentication/authorization packets
and the accounting packets if the authentication/authorization server and the
accounting server are different devices and the shared keys on the two servers are also
different.
1.4.5 Configuring the Maximum Number of Transmission Attempts of
RADIUS Requests
The communication through RADIUS is unreliable because this protocol adopts UDP
packets to carry data. Therefore, it is necessary for the switch to retransmit a RADIUS
request if it gets no response from the RADIUS server after the response timeout timer
expires. If the maximum number of transmission attempts is reached and the switch still
receives no answer, the switch considers that the authentication fails.
Table 1-16 Configure the maximum transmission attempts of RADIUS request
To do... Use the command... Remarks
Enter system view
system-view
—
Create a RADIUS
scheme and enter its
view
radius scheme
radius-scheme-name
Required
By default, a RADIUS scheme
named system has already
been created in the system.
Set the maximum
number of transmission
attempts of RADIUS
requests
retry retry-times
Optional
By default, the system tries
three times to transmit a
RADIUS request.