H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-31
Table 1-21 Set the timers of RADIUS server
To do... Use the command... Remarks
Enter system view
system-view
Create a RADIUS
scheme and enter its
view
radius scheme
radius-scheme-name
Required
By default, a RADIUS scheme
named system has already
been created in the system.
timer response-timeout
seconds
Set the response
timeout time of
RADIUS servers
timer seconds
Optional
By default, the response
timeout timer of RADIUS
servers expires in three
seconds.
Set the wait time for
the primary server to
restore the active
state
timer quiet minutes
Optional
By default, the primary server
waits five minutes before
restoring the active state.
Set the real-time
accounting interval
timer
realtime-accounting
minutes
Optional
By default, the real-time
accounting interval is 12
minutes.
1.4.11 Configuring the User Re-Authentication upon Device Restart Function
Note:
The function applies to the environment where the RADIUS authentication/accounting
server is CAMS.
In an environment with a CAMS server, if the switch reboots after an exclusive user (a
user whose concurrent online number is set to 1 on the CAMS) gets authenticated and
authorized and begins being charged, the CAMS will give a prompt that the user has
already been online when the user re-logs in to the switch before CAMS performs
online user detection, and the user cannot get authenticated. In this case, the user can
access the network again only after the CAMS administrator manually removes the
online information of the user.
The user re-authentication upon device restart function is designed to resolve the
above problem. After this function is enabled, every time the switch restarts: