HP 6125XLG R2306-HP 6125XLG Blade Switch Security Configuration Guide - Page 45
Displaying and maintaining HWTACACS, state by first checking
View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 45 highlights
search process continues until the device finds an available secondary server or has checked all secondary servers in active state. If the quiet timer of a server expires, the status of the server changes back to active, but the device does not check the server again during the authentication or accounting process. If no server is found reachable during one search process, the device considers the authentication or accounting attempt a failure. • If you remove an authentication or accounting server in use, the communication of the device with the server soon times out, and the device looks for a server in active state by first checking the primary server and then secondary servers in the order they are configured. • When the primary server and secondary servers are all in blocked state, the device does not communicate with any server. • If one server is in active state and all the others are in blocked state, the device tries to communicate with the server in active state only, even if the server is unavailable. • If the status of an HWTACACS server changes automatically, the device changes the status of this server accordingly in all HWTACACS schemes in which this server is specified. To set HWTACACS timers: Step 1. Enter system view. Command system-view Remarks N/A 2. Enter HWTACACS scheme view. hwtacacs scheme hwtacacs-scheme-name N/A 3. Set the HWTACACS server response timeout timer. timer response-timeout seconds By default, the HWTACACS server response timeout timer is 5 seconds. By default, the real-time accounting interval is 12 minutes. 4. Set the real-time accounting A short interval helps improve interval. timer realtime-accounting minutes accounting precision but requires many system resources. When there are 1000 or more users, set a longer interval. 5. Set the server quiet timer. timer quiet minutes By default, the server quiet timer is 5 minutes. Displaying and maintaining HWTACACS Execute the display command in any view and the reset command in user view. Purpose Display the configuration or server statistics of HWTACACS schemes. Clear HWTACACS statistics. Command display hwtacacs scheme [ hwtacacs-server-name [ statistics ] reset hwtacacs statistics { accounting | all | authentication | authorization } 36