HP 6125G HP 6125G & 6125G/XG Blade Switches Security Configuration Gui - Page 47
Setting timers for controlling communication with HWTACACS servers
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 47 highlights
Step 3. Specify a source IP address for outgoing HWTACACS packets. Command nas-ip ip-address Remarks By default, the IP address of the outbound interface is used as the source IP address. Setting timers for controlling communication with HWTACACS servers The switch uses the following timers to control the communication with an HWTACACS server: • Server response timeout timer (response-timeout)-Defines the HWTACACS request retransmission interval. After sending an HWTACACS request (authentication, authorization, or accounting request), the switch starts this timer. If the switch receives no response from the server before this timer expires, it resends the request. • Server quiet timer (quiet)-Defines the duration to keep an unreachable server in blocked state. If a server is not reachable, the switch changes the server's status to blocked, starts this timer for the server, and tries to communicate with another server in active state. After this timer expires, the switch changes the status of the server back to active. • Real-time accounting timer (realtime-accounting)-Defines the interval at which the switch sends real-time accounting updates to the HWTACACS accounting server for online users. To implement real-time accounting, the switch must send real-time accounting packets to the accounting server for online users periodically. To set timers for controlling communication with HWTACACS servers: Step 1. Enter system view. 2. Enter HWTACACS scheme view. 3. Set the HWTACACS server response timeout timer. 4. Set the quiet timer for the primary server. 5. Set the real-time accounting interval. Command system-view hwtacacs scheme hwtacacs-scheme-name timer response-timeout seconds timer quiet minutes timer realtime-accounting minutes Remarks N/A N/A Optional. The default HWTACACS server response timeout timer is 5 seconds. Optional. The default quiet timer for the primary server is 5 minutes. Optional. The default real-time accounting interval is 12 minutes. NOTE: Consider the performance of the NAS and the HWTACACS server when you set the real-time accounting interval. A shorter interval requires higher performance. A shorter interval requires higher performance. Displaying and maintaining HWTACACS 37