HPE FlexFabric 5940 SERIES, Руководство по настройке безопасности

Страница: 55 / 571

42
•
When an HWTACACS server's status changes automatically, the device changes this server's
status accordingly in all HWTACACS schemes in which this server is specified.
To set HWTACACS timers:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enter HWTACACS scheme
view.
hwtacacs scheme
hwtacacs-scheme-name
N/A
3. Set the HWTACACS server
response timeout timer.
timer response-timeout
seconds
By default, the HWTACACS
server response timeout timer is 5
seconds.
4. Set the real-time accounting
interval.
timer realtime-accounting
minutes
By default, the real-time
accounting interval is 12 minutes.
A short interval helps improve
accounting precision but requires
many system resources. When
there are 1000 or more users, set
a longer interval.
5. Set the server quiet timer.
timer quiet minutes
By default, the server quiet timer
is 5 minutes.
Displaying and maintaining HWTACACS
Execute display commands in any view and reset commands in user view.
Task Command
Display the configuration or server
statistics of HWTACACS schemes. display hwtacacs scheme [ hwtacacs-scheme-name
[ statistics ] ]
Display information about buffered
HWTACACS stop-accounting requests
to which no responses have been
received.
display stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name
Clear HWTACACS statistics.
reset hwtacacs statistics
{
accounting
|
all
|
authentication
|
authorization }
Clear the buffered HWTACACS
stop-accounting requests to which no
responses have been received.
reset stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name
Configuring LDAP schemes
Configuration task list
Tasks at a glance
Configuring an LDAP server:
•
(Required.) Creating an LDAP server
•
(Required.) Configuring the IP address of the LDAP server
•
(Optional.) Specifying the LDAP version
•
(Optional.) Setting the LDAP server timeout period
•
(Required.) Configuring administrator attributes
•
(Required.) Configuring LDAP user attributes