Displaying and maintaining hwtacacs, Configuring aaa methods for isp domains, Configuring aaa – H3C Technologies H3C S7500E Series Switches User Manual
Page 54: Methods for isp, Domains
2-25
z
For real-time accounting, a NAS must transmit the accounting information of online users to the
HWTACACS accounting server periodically. Note that if the device does not receive any
response to the information, it does not disconnect the online users forcibly.
z
The real-time accounting interval must be a multiple of 3.
z
The setting of the real-time accounting interval somewhat depends on the performance of the
NAS and the HWTACACS server: A shorter interval requires higher performance.
Displaying and maintaining HWTACACS
To do…
Use the command…
Remarks
Display configuration information or
statistics of the specified or all
HWTACACS schemes on a
distributed device
display hwtacacs
[ hwtacacs-server-name
[ statistics ] ] [ slot slot-number ]
Available in any view
Display configuration information or
statistics of the specified or all
HWTACACS schemes on a
distributed IRF
member
device
display hwtacacs
[ hwtacacs-server-name [ statistics ] ]
[ chassis chassis-number slot
slot-number ]
Available in any view
Display information about buffered
stop-accounting requests that get
no responses on a distributed
device
display stop-accounting-buffer
hwtacacs-scheme
hwtacacs-scheme-name [ slot
slot-number ]
Available in any view
Display information about buffered
stop-accounting requests that get no
responses on a distributed IRF
member device
display stop-accounting-buffer
hwtacacs-scheme
hwtacacs-scheme-name [ chassis
chassis-number slot slot-number ]
Available in any view
Clear HWTACACS statistics on a
distributed device
reset hwtacacs statistics
{ accounting | all | authentication |
authorization } [ slot slot-number ]
Available in user view
Clear buffered stop-accounting
requests that get no responses on
a distributed device
reset stop-accounting-buffer
hwtacacs-scheme
hwtacacs-scheme-name [ slot
slot-number ]
Available in user view
Configuring AAA Methods for ISP Domains
You configure AAA methods for an ISP domain by referencing configured AAA schemes in ISP domain
view. Each ISP domain has a set of default AAA methods, which are local authentication, local
authorization, and local accounting by default and can be customized. If you do not configure any AAA
methods for an ISP domain, the device uses the system default AAA methods for authentication,
authorization, and accounting of the users in the domain.