Extreme Networks ExtremeWare XOS 11.3, Руководство пользователя

Страница: 331 / 698

Authenticating Users Using RADIUS or
ExtremeWare XOS 11.3 Concepts Guide
331
This section describes the following topics:
●
Configuring the Servers on page 331
●
Configuring the Timeout Value on page 331
●
Configuring the Shared Secret Password for Servers on page 331
●
Enabling and Disabling on page 332
●
Configuration Example on page 332
●
Configuring Accounting on page 333
●
Configuring the Accounting Timeout Value on page 333
●
Configuring the Shared Secret Password for Accounting Servers on page 333
●
Enabling and Disabling Accounting on page 334
●
Accounting Configuration Example on page 334
Configuring the Servers
To configure the servers, use the following command:
configure tacacs [primary | secondary] server [<ipaddress> | <hostname>] {<tcp_port>}
client-ip <ipaddress> {vr <vr_name>}
To configure the primary server, specify
primary
. To configure the secondary
server, specify
secondary
.
Configuring the Timeout Value
To configure the timeout if a server fails to respond, use the following command:
configure tacacs timeout <seconds>
To detect and recover from a server failure when the timeout has expired, the switch makes
one authentication attempt before trying the next designated server or reverting to the local
database for authentication. In the event that the switch still has IP connectivity to the server,
but a TCP session cannot be established, (such as a failed daemon on the server), fail over
happens immediately regardless of the configured timeout value.
For example, if the timeout value is set for 3 seconds (the default value), it will take 3 seconds to fail
over from the primary server to the secondary server. If both the primary and the
secondary servers fail or are unavailable, it takes approximately 6 seconds to revert to the local database
for authentication.
Configuring the Shared Secret Password for Servers
In addition to specifying the server IP information, also contains a means to verify
communication between network devices and the server. The shared secret is a password configured on
the network device and server, used by each to verify communication.
To configure the shared secret for servers, use the following command:
configure tacacs [primary | secondary] shared-secret {encrypted} <string>
To configure the primary server, specify
primary
. To configure the secondary
server, specify
secondary
.