Filter
Top Products
236 CHAPTER 9: AAA AND RADIUS OPERATION
Setting TACACS Server Timers
Setting the response timeout timer After HWTACACS is implemented on the
basis of TCP, server response timeout or TCP timeout may terminate the
connection to the TACACS server.
Perform the following configuration in HWTACACS view.
The default response timeout timer is set to 5 seconds.
Setting the quiet timer for the primary TACACS server Perform the
following configuration in HWTACACS view.
By default, the primary TACACS server must wait five minutes before it can
resume the active state.
Setting a realtime accounting interval The setting of real-time accounting
interval is necessary to real-time accounting. After an interval value is set, the NAS
transmits the accounting information of online users to the TACACS accounting
server periodically.
Perform the following configuration in HWTACACS view.
The interval is in minutes and must be a multiple of 3.
The setting of real-time accounting interval somewhat depends on the
performance of the NAS and the TACACS server: a shorter interval requires higher
device performance. You are therefore recommended to adopt a longer interval
when there are a large number of users (more than 1000, inclusive). The following
table lists the numbers of users and the recommended intervals.
Table 252 Setting the response timeout timer
Operation Command
Set the response timeout time timer response-timeout seconds
Restore the default setting undo timer response-timeout
Table 253 Setting the quiet timer for the primary TACACS server
Operation Command
Set the quiet timer for the primary TACACS
server.
timer quiet minutes
Restore the default setting. undo timer quiet
Table 254 Setting a real-time accounting interval
Operation Command
Set a real-time accounting interval timer realtime-accounting minutes
Restore the default real-time accounting
interval
undo timer realtime-accounting
Table 255 Numbers of users and the recommended intervals
Number of users Real-time accounting interval (minutes)
1 - 99 3
100 - 499 6