Chapter 4 Configuring the domain 133

 

 

 

 

 

 

 

/cfg/domain #/aaa/tg

 

 

followed by:

 

 

 

 

 

heartbeat <interval>

Sets the time interval between checks for client activity.

 

 

interval is an integer that indicates the time

 

 

interval in seconds (s), minutes (m), or hours (h).

 

 

The valid range is 60s (1m) to 86400s (24h). The

 

 

default is 1m (1 minute).

 

 

 

 

hbretrycnt <count>

Specifies the number of times the Nortel SNAS 4050

 

 

will repeat the check for client activity when no

 

 

heartbeat is detected.

 

 

count is an integer in the range 1–65535 that

 

 

indicates the number of retries. The default is 3.

 

 

If no heartbeat is detected after the specified number of

 

 

retries (the inactivity interval), the Nortel SNAS 4050

 

 

default behavior is to terminate the session (see

 

 

/cfg/domain #/aaa/tg/status-quo).

 

 

 

 

status-quo onoff

Specifies whether the Nortel SNAS 4050 domain

 

 

operates in status-quo mode. Status-quo mode

 

 

determines the behavior of the Nortel SNAS 4050 if no

 

 

client activity is detected after the inactivity interval

 

 

(heartbeat x hbretrycnt). The options are:

 

 

on — the client session continues indefinitely

 

 

off — the Nortel SNAS 4050 terminates the

 

 

session immediately

 

 

The default is off.

 

 

 

 

action

Specifies the action to be performed if the client fails

 

teardownrestricted

the TunnelGuard SRS rule check. The options are:

 

 

restricted — the session remains intact, but

 

 

access is restricted in accordance with the rights

 

 

specified in the access rules for the group

 

 

teardown — the SSL session is torn down

 

 

 

 

list

Lists the SRS rules configured for the domain.

 

 

For information about creating SRS rules, see

 

 

“TunnelGuard SRS Builder” on page 317.

 

 

The TunnelGuard applet can apply different SRS rules

 

 

for different groups. For information about specifying

 

 

the SRS rule to use for the TunnelGuard check, see

 

 

“Configuring groups using the CLI” on page 198.

 

 

 

Nortel Secure Network Access Switch 4050 User Guide

Page 133
Image 133
Nortel Networks 4050 manual Cfg/domain #/aaa/tg/status-quo