H3C Technologies H3C S3100 Series Switches - Manual (Page 337)

Operation Manual – AAA – RADIUS – HWTACACS
H3C S3100-52P Ethernet Switch
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-38
Operation Command Description
HWTACACS scheme
view
nas-ip ip-address
Set the source IP address
of outgoing HWTACACS
messages System view
hwtacacs nas-ip
ip-address
Optional
By default, no source IP
address is set; the IP
address of the
corresponding outbound
interface is used as the
source IP address.
Caution:
Generally, the access users are named in the userid@isp-name format. Where,
isp-name
behind the @ character represents the ISP domain name. If the TACACS
server does not accept the user names that carry ISP domain names, it is necessary to
remove domain names from user names before they are sent to TACACS server.
1.5.7 Configuring the Timers of TACACS Servers
Table 1-30
Configure the timers of TACACS servers
Operation Command Description
Enter system view
system-view
—
Create a HWTACACS
scheme and enter its view
hwtacacs scheme
hwtacacs-scheme-name
Required
By default, no
HWTACACS scheme
exists.
Set the response timeout
time of TACACS servers
timer response-timeout
seconds
Optional
By default, the response
timeout time is five
seconds.
Set the time that the
switch must wait before it
can restore the status of
the primary server to
active
timer quiet
minutes
Optional
By default, the switch
must wait five minutes
before it can restore the
status of the primary
server to active.
Set the real-time
accounting interval
timer
realtime-accounting
minutes
Optional
By default, the real-time
accounting interval is 12
minutes.