3Com 4800G Series, Configuration Manual

Page: 768 / 1246

768 C
HAPTER
53: AAA/RADIUS/HWTACACS C
ONFIGURATION
n
■
The maximum number of retransmission attempts of RADIUS packets
multiplied by the RADIUS server response timeout period cannot be greater
than 75.
■
Refer to the timer response-timeout command in the command manual for
configuring RADIUS server response timeout period.
Setting the Supported
RADIUS Server Type
Follow these steps to set the supported RADIUS server type:
n
■
If you change the type of RADIUS server, the data stream destined to the
original RADIUS server will be restored to the default unit.
■
When a third-party RADIUS is used, you can configure the RADIUS server to
standard or extended . When CAMS server is used, you must RADIUS server
to extended.
Setting the Status of
RADIUS Servers
When a primary server, authentication/authorization server or accounting server,
fails, the device automatically turns to the secondary server.
When both the primary and secondary servers are available, the device sends
request packets to the primary server.
Once the primary server fails, the primary server turns into the state of block, and
the device turns to the secondary server. In this case:
■
If the secondary server is available, the device triggers the primary server quiet
timer. After the quiet timer times out, the status of the primary server is active
again and the status of the secondary server remains the same.
■
If the secondary server fails, the device restores the status of the primary server
to active immediately.
If the primary server has resumed, the device turns to use the primary server and
stops communicating with the secondary server. After accounting starts, the
communication between the client and the secondary server remains unchanged.
Follow these steps to set the status of RADIUS servers:
To do… Use the command… Remarks
Enter system view system-view -
Create a RADIUS scheme and
enter RADIUS scheme view radius scheme
radius-scheme-name
Required
Not defined by default
Specify the RADIUS server
type supported by the device server-type { extended |
standard }
Optional
By default, the RADIUS server
type is
standard .
To do… Use the command… Remarks
Enter system view system-view -
Create a RADIUS scheme and
enter RADIUS scheme view radius scheme
radius-scheme-name
Required
Not defined by default