HP VPN Firewall Appliances Access Control Command Reference

200
Related commands
display radius scheme
radius trap
Use radius trap to enable the trap function for RADIUS.
Use undo radius trap to disable the trap function for RADIUS.
Syntax
radius trap { accounting-server-down | authentication-error-threshold | authentication-server-down }
undo radius trap { accounting-server-down | authentication-error-threshold |
authentication-server-down }
Default
The trap function is disabled for RADIUS.
Views
System view
Default command level
2: System level
Parameters
accounting-server-down: Sends traps when the reachability of the accounting server changes.
authentication-error-threshold: Sends traps when the number of authentication failures exceed the
specified threshold. The threshold is represented by the ratio of the number of failed request transmission
attempts to the total number of transmission attempts. The value range for the threshold is 1 to 100, and
the default threshold is 30. This threshold can only be configured through the MIB.
authentication-server-down: Sends traps when the reachability of the authentication server changes.
Usage guidelines
With the trap function for RADIUS, a NAS sends a trap message in the following cases:
• When the status of a RADIUS server changes. If a NAS sends a request but receives no response
before the maximum number of attempts is exceeded, it places the server to the blocked state and
sends a trap message. If a NAS receives a response from a RADIUS server it considered
unreachable, it considers that the RADIUS server is reachable again and also sends a trap
message.
• When the ratio of the number of failed transmission attempts to the total number of authentication
request transmission attempts reaches the threshold.
Examples
# Enable the device to send traps in response to accounting server reachability changes.
<Sysname> system-view
[Sysname] radius trap accounting-server-down
reset radius statistics
Use reset radius statistics to clear RADIUS statistics.