HP VPN Firewall Appliances Access Control Configuration Guide

255
Confi
g
uration item Descri
p
tion
Unit of Packets
Specify the unit for data packets sent to the HWTACACS server for traffic
accounting.
The device periodically sends accounting updates to HWTACACS accounting
servers to report the traffic statistics of online users. For accurate accounting,
make sure that the units for data flows and packets on the device are consistent
with those configured on the HWTACACS servers.
Options include:
• Packet.
• Kilo-packet.
• Mega-packet.
• Giga-packet.
If you leave the field blank, the default unit is used.
Configuration guidelines
When you configure the HWTACACS client, follow these guidelines:
• You cannot delete the HWTACACS scheme or modify the HWTACACS server addresses when
online users exist.
• You can remove an authentication/authorization/accounting server only when no packet is
exchanged between the device and that server.
• HWTACACS does not support accounting for FTP users.
• Consider the number of users to be managed when you set the real-time accounting interval, as
shown in Table 54.
Table 54 Recommend
ed real-time accounting interval settings
Number of users Real-time accountin
g
interval (in minutes)
1 to 99 3
100 to 499 6
500 to 999 12
≥1000 ≥15
Configuring an ISP domain
1. Select User > AAA > Domain Setup from the navigation tree.
The Domain Setup page appears.