236CHAPTER 9: AAA AND RADIUS OPERATION

Setting TACACS Server Timers

Setting the response timeout timer After HWTACACS is implemented on the basis of TCP, server response timeout or TCP timeout may terminate the connection to the TACACS server.

Perform the following configuration in HWTACACS view.

Table 252 Setting the response timeout timer

Operation

Command

 

 

Set the response timeout time

timer response-timeout seconds

Restore the default setting

undo timer response-timeout

 

 

The default response timeout timer is set to 5 seconds.

Setting the quiet timer for the primary TACACS server Perform the following configuration in HWTACACS view.

Table 253 Setting the quiet timer for the primary TACACS server

Operation

Command

 

 

Set the quiet timer for the primary TACACS

timer quiet minutes

server.

 

Restore the default setting.

undo timer quiet

 

 

By default, the primary TACACS server must wait five minutes before it can resume the active state.

Setting a realtime accounting interval The setting of real-time accounting interval is necessary to real-time accounting. After an interval value is set, the NAS transmits the accounting information of online users to the TACACS accounting server periodically.

Perform the following configuration in HWTACACS view.

Table 254 Setting a real-time accounting interval

Operation

Command

 

 

Set a real-time accounting interval

timer realtime-accounting minutes

Restore the default real-time accounting

undo timer realtime-accounting

interval

 

 

 

The interval is in minutes and must be a multiple of 3.

The setting of real-time accounting interval somewhat depends on the performance of the NAS and the TACACS server: a shorter interval requires higher device performance. You are therefore recommended to adopt a longer interval when there are a large number of users (more than 1000, inclusive). The following table lists the numbers of users and the recommended intervals.

Table 255 Numbers of users and the recommended intervals

Number of users

Real-time accounting interval (minutes)

 

 

1 - 99

3

100 - 499

6

Page 236
Image 236
3Com 10014298 manual Setting Tacacs Server Timers, Default response timeout timer is set to 5 seconds