H3C S5120-EI Series, Руководство по эксплуатации

Страница: 543 / 1191

1-29
To do… Use the command… Remarks
Set the real-time accounting
interval
timer realtime-accounting
minutes
Optional
12 minutes by default
z
The maximum number of retransmission attempts of RADIUS packets multiplied by the RADIUS
server response timeout period cannot be greater than 75 and the upper limit of this product is
determined by the upper limit of the timeout time of different access modules.
z
For an access module, the maximum number of retransmission attempts multiplied by the RADIUS
server response timeout period must be smaller than the timeout time. Otherwise, stop-accounting
messages cannot be buffered, and the primary/secondary server switchover cannot take place.
For example, as the timeout time of voice access is 10 seconds, the product of the two parameters
cannot exceed 10 seconds; as the timeout time of Telnet access is 30 seconds, the product of the
two parameters cannot exceed 30 seconds. For detailed information about timeout time of a
specific access module, refer to the corresponding part in the
Access Volume.
z
To configure the maximum number of retransmission attempts of RADIUS packets, refer to the
command
retry
in the command manual.
Specifying a Security Policy Server
The core of the EAD solution is integration and cooperation, and the security policy server system is the
management and control center. As a collection of software, the security policy server system provides
functions such as user management, security policy management, security status assessment, security
cooperation control, and security event audit.
This configuration task is to specify the IP address of a security policy server. After that, the access
device only accepts control packets sent from the specified IP address. If the iMC configuration platform,
the authentication server and the security policy server use the same IP address, you need not
configure this task.
To implement EAD, you need to use the
security-policy-server
command to specify the IP addresses
of the iMC policy server and iMC configuration platform.
Follow these steps to specify a security policy server:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a RADIUS scheme and
enter its view
radius scheme
radius-scheme-name
Required
By default, no RADIUS scheme is
present.
Specify a security policy server
security-policy-server ip-address
Required
Not specified by default