3Com 10014298 - page 225

Configuring the RADIUS Protocol 225

larger value. The following table recommends the ratio of minute value to the

number of users.

By default, minute is set to 12 minutes.

Setting Maximum Times of Real-time Accounting Request

The RADIUS server usually verifies that a user is online with timeout timer. If the

RADIUS server has not received the real-time accounting packet from NAS for a

specified period, it stops accounting. Therefore, it may be necessary to disconnect

the user at the NAS end and on the RADIUS server when some unpredictable

failure exists. The Switch 7750 allows you to configure the maximum number of

retries for real-time accounting requests. NAS disconnects the user if it has not

received a real-time accounting response from the RADIUS server for the specified

number of times.

Perform the following configurations in RADIUS server group view.

The value of retry-times is the ceiling value of T/t, where T is the period of time

in which the RADIUS server connection will timeout, and t is the real-time

accounting interval of NAS.

By default, the value for retry-times is 5.

Enabling/Disabling Stop Accounting Request Buffer

Because the stop accounting request concerns the account balance, and affects

the amount to charge a customer, NAS makes its best effort to send the message

to the RADIUS accounting server. If the message from the Switch 7750 to RADIUS

accounting server has not been responded to, the switch saves it in the local

buffer and retransmits until the server responds or discards the messages. The

following command can be used to enable the storage of the stop accounting

message. If the stop-accounting buffer is enabled, make sure you set the

maximum retransmission time.

Tabl e 242 Recommended Ratio of Minute to Number of Users

Number of users Real-time accounting interval (minute)

1 to 99 3

100 to 499 6

500 to 999 12

1000 15

Tabl e 243 Set Maximum Times of Real-Time Accounting Request Failing to be Responded

Operation Command

Configure the maximum number of retries for

real-time accounting requests.

retry realtime-accounting

retry-times

Restore the maximum number of retries for

real-time accounting requests to the default

value.

undo retry realtime-accounting

Contents

Main 3Com Corporation 350 Campus Drive Marlborough, MA 01752-3064 C ABOUT THIS GUIDE S YSTEM A PORT CONFIGURATION VLAN C IP ROUTING PROTOCOL OPERATION M ULTICAST P QOS/ OPERATION STP O AAA AND RADIUS OPERATION SYSTEM MANAGEMENT Page Page ABOUT THIS GUIDE This guide describes the 3Com Switch 7750 and how to configure it in version 3.0 of the software. Tabl e 2 lists the text conventions used in this book. Conventions Tabl e 1 Notice Icons Table 2 Text Conventions 1 Product Overview Configuring the Switch 7750 Figure 1 Setting Up the Local Configuration Environment Through the Console Port Table 3 Function Features (continued) Page Page Page Ethernet Page Page Page Page Page Page Page Page Page Page Page Command Line Interface Page Tabl e 20 Function Feature of Command View Page Page Tabl e 23 Editing Functions Tabl e 24 Display Functions Table 22 Retrieve History Command Page 2 Ethernet Port Overview Page Page Page Page Page Page Configuring Link Aggregation Page Page Page Page Page Page Perform the following configuration in Ethernet port view. Tabl e 44 Configure Port Priority Tabl e 45 Display and Debug Link Aggregation Page Page Page 3 VLAN Overview Configuring VLANs Page Page Page Page Page Page 3Configure the protocol VLAN on port G1/0/1 Configuring GARP/GVRP Page Page Page Page Page 4 Configuring IP Address Page Page Configuring Address Resolution Protocol (ARP) Page DHCP Relay Page Page Page Page IP Performance Page Page Page 5 IP Routing Protocol Overview Page Page Static Routes Page Page Page Page RIP Page Page Page Page Page Page Page Page Page IP Routing Policy Page Page Page Page Page Route Capacity Page Page Page 6 IP Multicast Overview Page Page Page Page Configuring Common Multicast Page Configuring IGMP Page Page Page Page Page Page Page IGMP Snooping Page Page Page Page Page Configuring PIM-DM Page Page Page Page Figure 33 PIM-DM Configuration Networking 2Enable PIM-DM. Table 144 Displaying and Debugging PIM-DM Configuring PIM-SM Page Page Page Page Page Page Page Execute the debugging command in user view to debug PIM-SM. Figure 35 PIM-SM Configuration Networking Configure Switch A 1Enable PIM-SM. Tabl e 157 Display and Debug PIM-SM Configure Switch B 1Enable PIM-SM. 2Configure the C-BSR. 3Configure the C-RP. 4Configure PIM domain border. GMRP Page Page 7 ACL Overview Page Configuring ACLs Page Page Page ACL Configuration Examples Page Configuring QoS Page Page Page Page Page Page Page Page Page Tabl e 183 Configuring Traffic Statistics Tabl e 184 Display and Debug QoS Page Page Page Page Page Page Page Configuring ACL Control Page Page Page Page Page 8 STP Overview Configuring STP Page Page Page Page MSTP Overview Page Page Configuring MSTP Page Page Page Page Page Page Page Page Page Perform the following configuration in system view. By default, the switch calculates the default Path Cost of a port by the IEEE 802.1t standard. Tabl e 204 Specifying the Standard To Be Followed in Path Cost Calculation Tabl e 205 Cost Corresponding to the Port Speed of Different Standard Page Page Page Page Page Digest Snooping Page 9 IEEE 802.1x Page Page Page Page Page Page Page Implementing the AAA and RADIUS Protocols Page Configuring AAA Page Page Configuring the RADIUS Protocol Page Page Page Page Page Page Page Page Page Configuring HWTACACS Page Page Page Page Page Page The real-time accounting interval defaults to 12 minutes. Displaying and Debugging the AAA, RADIUS, and HWTACACS Protocols Table 255 Numbers of users and the recommended intervals Tabl e 256 Displaying and Debugging AAA and RADIUS/HWTACACS Protocol AAA, RADIUS, and HWTACACS Protocol Configuration Examples Page Page Troubleshooting AAA, RADIUS, and HWTACACS Configurations Page 11 File System Page Page Page Page Page Managing the MAC Address Table Page Page Page Managing Devices Page Maintaining and Debugging the System Page Page Page Page Page Page The system assigns a channel in each output direction by default. See Tabl e 293. Tabl e 293 Numbers and Names of the Channels for Log Output Tabl e 294 Syslog-Defined Severity Table 292 Log Output (continued) Page Page SNMP Page Page Page Page Page Page Tabl e 310 Enable/Disable Transmission of Trap Information Tabl e 311 Disabling SNMP Agent Tabl e 312 Displaying and Debugging SNMP Page RMON Page Page Page NTP Page Page Page Page Page Page Page Page After the synchronization, SW77502 turns into the following status: