Cisco MGX 8830, Руководство по настройке

Страница: 429 / 642

9-65
Cisco MGX 8850 (PXM1E/PXM45), Cisco MGX 8950, Cisco MGX 8830, and Cisco MGX 8880 Configuration Guide
Release 5.0.10, OL-3845-01 Rev. B0, August 16, 2004
Chapter 9 Switch Operating Procedures
Managing Remote () Authentication and Authorization
timeout The optional timeout parameter specifies how long the switch will wait for an authentication or
authorization response from a server. If no response is received by the end of the timeout period, the
server is marked dead and the switch does not try to access that server again until the end of the dead
time period, which is describe below.
When a server is marked dead, the switch tries to access the next server in the configured list. If no
AAA servers respond, the switch uses the next configured method as described in the “
Configuring
User Authentication on the Switch ” and “ Configuring Command Authorization on the Switch ”
sections.
You can specify the time out by entering a number in the range of 1 to 30 seconds, or by entering the
default keyword. The default timeout value is 5 seconds.
dt This optional parameter defines the dead time for a configured server. The dead time starts when a
server fails to respond. During the dead time, the switch will not attempt to use the unresponsive
server. Instead, the switch will use other configured servers, and if all servers are unresponsive, the
switch uses other authentication and authorization methods as described in the “
Configuring User
Authentication on the Switch ” and “ Configuring Command Authorization on the Switch ” sections.
You can specify the dead time out by entering a number in the range of 0 to 5 minutes, or by entering
the default keyword. The default dead time value is 0 minutes.
single This optional parameter selects either single-connection server communications or
multiple-connection server communications. If single-connection communications are selected, the
switch attempts to direct all authentication and authorization requests through a single TCP connection
to the server. If single-connection communications are disabled, multiple TCP connections are used
for multiple authentication and authorization requests.
Note
When this feature is disabled (multiple-connection communications is enabled) and you are
running one or more scripts, we recommend executing commands no less than .6 seconds apart
for each script. For example, if two scripts are running at the same time, commands should be
executed not less than 1.2 seconds apart. If commands are issued more frequently than this, the
following symptoms can appear:
•
Telnet sessions take a long time to start.
• FTP sessions can fail.
•
The following message can appear: Command execution currently restricted to root users
only.
• The warning W_THROTTLED is logged once every 30 minutes while this occurs.
•
In the dspaaa-stats command display, the # socket throttles row values will increment.
Valid settings for this parameter are true, false, and default, which produces the same result as
selecting true. The default configuration for single-connection communications is true.
Table 9-29 Parameters for
cnfaaa-server
Command (continued)
Parameter Description