H3C S3100 Series, Operation Manual

Page: 443 / 1057

2-29
Configuring the Timers Regarding TACACS Servers
Table 2-31 Configure the timers regarding TACACS servers
Operation Command Remarks
Enter system view system-view —
Create an HWTACACS
scheme and enter its view hwtacacs scheme
hwtacacs-scheme-name
Required
By default, no HWTACACS
scheme exists.
Set the response timeout time
of TACACS servers timer response-timeout
seconds
Optional
By default, the response
timeout time is five seconds.
Set the time that the switch
must wait before it can restore
the status of the primary server
to active
timer quiet minutes
Optional
By default, the switch must wait
five minutes before it can
restore the status of the primary
server to active.
Set the real-time accounting
interval timer realtime-accounting
minutes
Optional
By default, the real-time
accounting interval is 12
minutes.
z
To control the interval at which users are charge in real time, you can set the real-time accounting
interval. After the setting, the switch periodically sends online users' accounting information to the
TACACS server at the set interval.
z
The real-time accounting interval must be a multiple of 3.
z
The setting of real-time accounting interval somewhat depends on the performance of the
TACACS client and server devices: A shorter interval requires higher device performance.
Displaying and Maintaining AAA
After the above configurations, you can execute the display commands in any view to view the
configuration result and operation status of AAA, RADIUS and HWTACACS and verify your
configuration.
You can use the reset command in user view to clear the corresponding statistics.
Table 2-32 Display AAA information
Operation Command Remarks
Display configuration
information about one specific
or all ISP domains
display domain [ isp-name ]
You can
execute the
display