Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-51
z
A real-time account request may be sent multiple times (set by the
retry
command
in RADIUS scheme view) for an accounting attempt. If no response is received
even after the number of transmission attempts reaches the maximum, the
accounting attempt fails. Suppose that the response timeout time of the RADIUS
server is three seconds (set by the
timer response-timeout
command), that the
maximum number of transmission attempts (set by the
retry
command) is 3, and
that the real-time accounting interval is 12 minutes (set by the
timer
realtime-accounting
command), the maximum number of real-time accounting
request attempts is 5 (set by the
retry realtime-accounting
command). In this
case, the switch sends an accounting request every 12 minutes; if the switch does
not receive a response within 3 seconds after it sends out an accounting request, it
resends the request; if the switch continuously sends the accounting request for
three times but does not receive any response; it considers this real-time
accounting a failure. Then, the switch sends the accounting request every 12
minutes; if the number of accounting failures exceeds five, the user connection is
cut down. In general, the product of T and
retry-times
should be less than t.
Related command:
radius scheme
and
timer realtime-accounting
.
Example
# Allow the switch to continuously send at most 10 real-time accounting requests if it
gets no response for the RADIUS scheme radius1.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] radius scheme radius1
New Radius scheme
[Sysname-radius-radius1] retry realtime-accounting 10
1.2.21 retry stop-accounting
Syntax
retry stop-accounting retry-times
undo retry stop-accounting
View
RADIUS scheme view
Parameter
retry-times
: Maximum number of stop-accounting request failures allowed, ranging
from 10 to 65,535.
