1-29
To do…
Use the command…
Remarks
Set the real-time accounting
interval
timer realtime-accounting
minutes
Optional
12 minutes by default
z
The maximum number of retransmission attempts of RADIUS packets multiplied by the RADIUS
server response timeout period cannot be greater than 75 and the upper limit of this product is
determined by the upper limit of the timeout time of different access modules.
z
For an access module, the maximum number of retransmission attempts multiplied by the RADIUS
server response timeout period must be smaller than the timeout time. Otherwise, stop-accounting
messages cannot be buffered, and the primary/secondary server switchover cannot take place.
For example, as the timeout time of voice access is 10 seconds, the product of the two parameters
cannot exceed 10 seconds; as the timeout time of Telnet access is 30 seconds, the product of the
two parameters cannot exceed 30 seconds. For detailed information about timeout time of a
specific access module, refer to the corresponding part in the
Access Volume.
z
To configure the maximum number of retransmission attempts of RADIUS packets, refer to the
command
retry
in the command manual.
Configuring RADIUS Accounting-On
With the accounting-on feature enabled, a device sends, whenever it reboots, accounting-on packets to
the RADIUS server, so that the server logs out users that have logged in through the device before the
reboot. This solves the problem that users online before the reboot cannot re-log in after the reboot.
Once configured, the accounting-on feature functions immediately after the device restarts and
recovers its configurations. The feature functions by sending and retransmitting accounting-on requests
and dealing with accounting-on responses, and the device provides AAA services only after the
accounting-on feature completes its tasks. When the RADIUS servers of many RADIUS schemes (up to
16 schemes can be configured at present) are unavailable, the number of accounting-on packet
retransmission attempts is too big, or the retransmission interval of accounting-on packets is too long,
the accounting-on feature may take a long time, affecting user access negatively.
Follow these steps to configure accounting-on feature of a RADIUS server:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter RADIUS scheme view
radius scheme
radius-scheme-name
—
Enable accounting-on and
configure parameters
accounting-on enable
[
interval
seconds
|
send
send-times
] *
Required
Disabled by default.
The default interval is 3 seconds and the
default number of send-times is 5.