INS_CNXE2GE2TX8MSPOE 11 Jan 2021 PAGE 153
INSTALLATION AND OPERATION MANUAL
CNXE2GE2TX8MSPOE
TECH SUPPORT: 1.888.678.9427
6.8.5 AAA
Common Server Configurations
Configure authentication servers.
Label
Description
Timeout
The timeout, which can be set to a number between 3 and 3600 seconds, is the
maximum time to wait for a reply from a server. If the server does not reply within
this time frame, we will consider it to be dead and continue with the next enabled
server (if any).
RADIUS servers are using the UDP protocol, which is unreliable by design. In
order to cope with lost frames, the timeout interval is divided into 3 subintervals
of equal length. If a reply is not received within the subinterval, the request is
transmitted again. This algorithm causes the RADIUS server to be queried up to 3
times before it is considered to be dead.
Retransmit
The number of times the switch tries to connect to a RADIUS server.
Dead Time
The dead time, which can be set to a number between 0 and 3600 seconds, is
the period during which the switch will not send new requests to a server that has
failed to respond to a previous request. This will stop the switch from continually
trying to contact a server that it has already determined as dead.
Setting the dead time to a value greater than 0 (zero) will enable this feature, but
only if more than one server has been configured.
NAS-IP-Address
Indicates the identifying IP Address of the NAS which is requesting authentication
of the user, and SHOULD be unique to the NAS within the scope of the RADIUS
server.
NAS-ID
Network Access Server identifier (NAS-ID) for the interface. The NAS-ID is sent to
the RADIUS server by the controller (as a RADIUS client) using the authentication
request, which is used to classify users to different groups. You can enter up to 32
alphanumeric characters.
Delete
Click to delete an entry from the table.
