3Com 400 Family, Руководство по настройке

Страница: 210 / 344

208 C
HAPTER
11: 802.1X C
ONFIGURATION
The value of
minute
is related to the performance of NAS and RADIUS server. The
smaller the value, the higher the performances of NAS and RADIUS that are
required. When there are a large amount of users (more than 1000, inclusive),
3Com suggests a larger value. The following table recommends the ratio of
minute
value to the number of users.
Table 230 Recommended Ratio of Minute to Number of Users
By default,
minute
is set to 12 minutes.
Configure the RADIUS Server Response Timer
If the NAS receives no response from the RADIUS server after sending a RADIUS
request (authentication/authorization or accounting request) for a period of time,
the NAS resends the request, thus ensuring the user can obtain the RADIUS
service. You can specify this period by setting the RADIUS server response timeout
timer, taking into consideration the network condition and the desired system
performance.
Perform the following configurations in RADIUS Scheme View.
Table 231 Configure the RADIUS Server Response Timer
By default, the response timeout timer for the RADIUS server is set to three
seconds.
Displaying and
Debugging AAA and
RADIUS Protocol
After the above configuration, execute the
display
command in any view to
display the running of the AAA and RADIUS configuration, and to verify the effect
of the configuration. Execute the
reset
command in User View to reset AAA and
RADIUS statistics. Execute the
debugging
command in User View to debug AAA
and RADIUS.
Table 232 Displaying and Debugging AAA and RADIUS Protocol
Number of users Real-time accounting interval (minute)
1 to 99 3
100 to 499 6
500 to 999 12
1000 15
Operation Command
Configure the RADIUS server response timer
timer response-timeout seconds
Restore the default value of the interval
undo timer response-timeout
Operation Command
Display the configuration information of
the specified or all the ISP domains.
display domain [ isp_name ]
Display related information of user’s
connection
display connection [ access-type {
dot1x | mac-authentication } |
domain
domain_name | interface
interface_type interface_number |
ip ip_address | mac mac_address |
radius-scheme radius_scheme_name |
vlan vlanid | ucibindex ucib_index |
user-name user_name ]