H3C S5810 Series, Руководство по эксплуатации

Страница: 443 / 820

1-34
To do… Use the command… Remarks
Set the real-time accounting
interval timer realtime-accounting
minutes
Optional
12 minutes by default
z
For real-time accounting, a NAS must transmit the accounting information of online users to the
HWTACACS accounting server periodically. Note that if the device does not receive any response
to the information, it does not disconnect the online users forcibly
z
The real-time accounting interval must be a multiple of 3.
z
The setting of the real-time accounting interval somewhat depends on the performance of the NAS
and the HWTACACS server: a shorter interval requires higher performance.
Displaying and Maintaining HWTACACS
To do… Use the command… Remarks
Display configuration information or
statistics of the specified or all
HWTACACS schemes display hwtacacs
[ hwtacacs-server-name
[ statistics ] ]
Available in any view
Display information about buffered
stop-accounting requests that get
no responses display stop-accounting-buffer
hwtacacs-scheme
hwtacacs-scheme-name
Available in any view
Clear HWTACACS statistics
reset hwtacacs statistics
{ accounting | all | authentication
| authorization }
Available in user view
Clear buffered stop-accounting
requests that get no responses
reset stop-accounting-buffer
hwtacacs-scheme
hwtacacs-scheme-name
Available in user view
AAA Configuration Examples
AAA for Telnet Users by an HWTACACS Server
Network requirements
As shown in Figure 1-7 , configure the switch to use the HWTACACS server to provide authentication,
authorization, and accounting services to login users.
z
The HWTACACS server is used for authentication, authentication, and accounting. Its IP address
is 10.1.1.1.
z
On the switch, set the shared keys for authentication, authorization, and accounting packets to
expert . Configure the switch to remove the domain name from a user name before sending the
user name to the HWTACACS server.
z
On the HWTACACS server, set the shared keys for packets exchanged with the switch to expert .