INS_CNGE24MS-OB(M,S)_REV–
09/12/12 PAGE 93
INSTALLATION AND OPERATION MANUAL
CNGE24MS-OB(M,S)
TECH SUPPORT: 1.888.678.9427
Label
Description
TCP SYN
Specify the TCP “Synchronize sequence numbers” (SYN) value for this ACE.
0: TCP frames where the SYN field is set must not be able to match this entry.
1: TCP frames where the SYN field is set must be able to match this entry.
Any: Any value is allowed (“don’t-care”).
TCP PSH
Specify the TCP “Push Function” (PSH) value for this ACE.
0: TCP frames where the PSH field is set must not be able to match this entry.
1: TCP frames where the PSH field is set must be able to match this entry.
Any: Any value is allowed (“don’t-care”).
TCP ACK
Specify the TCP “Acknowledgment field significant” (ACK) value for this ACE.
0: TCP frames where the ACK field is set must not be able to match this entry.
1: TCP frames where the ACK field is set must be able to match this entry.
Any: Any value is allowed (“don’t-care”).
TCP URG
Specify the TCP “Urgent Pointer field significant” (URG) value for this ACE.
0: TCP frames where the URG field is set must not be able to match this entry.
1: TCP frames where the URG field is set must be able to match this entry.
Any: Any value is allowed (“don’t-care”).
AAA
Common Server Configuration
This page allows you to configure the Authentication Servers
Label
Description
Timeout
The Timeout, which can be set to a number between 3 and 3600 seconds, is the maximum
time to wait for a reply from a server.
If the server does not reply within this time frame, we will consider it to be dead and
continue with the next enabled server (if any).
RADIUS servers are using the UDP protocol, which is unreliable by design. In order to cope
with lost frames, the timeout interval is divided into 3 subintervals of equal length. If a reply
is not received within the subinterval, the request is transmitted again. This algorithm causes
the RADIUS server to be queried up to 3 times before it is considered to be dead.
Dead Time
The Dead Time, which can be set to a number between 0 and 3600 seconds, is the
period during which the switch will not send new requests to a server that has failed
to respond to a previous request. This will stop the switch from continually trying to
contact a server that it has already determined as dead.
Setting the Dead Time to a value greater than 0 (zero) will enable this feature, but only if
more than one server has been configured.
