H3C Technologies H3C SecPath F1000-E - Manual (Page 435)

6
Return to
HWTACACS configuration task list .
Configuring HWTACACS Parameters
When the HWTACACS scheme named system exists, select User > HWTACACS > Parameter
Configuration from the navigation tree to enter the HWTACACS parameter configuration page, as
shown in Figure 4 .
Figure 4 HWTACACS parameter configuration
Table 4 lists the HWTACACS parameters.
Table 4 HWTACACS parameters
Configuration item Description
NAS-IP
Source IP address for the device to use in HWTACACS packets to be sent to the
HWTACACS server. It is recommended to use a loopback interface address
instead of a physical interface address as the source IP address, because if the
physical interface is down, the response packets from the server cannot reach
the device.
Realtime-Accounting
Interval
Real-time accounting interval, whose value must be a multiple of 3.
To implement real-time accounting on users, it is necessary to set the real-time
accounting interval. After this parameter is specified, the device will send the
accounting information of online users to the HWTACACS server every the
specified interval. According to the protocol, the device will not disconnect the
online users even if the server does not make any response properly.
If you leave this text box blank, the real-time accounting interval is restored to the
default value.
IMPORTANT:
The value of the real-time accounting interval somewhat depends on the
performance of the NAS and HWTACACS server. A short interval requires
higher performance. You are therefore recommended to adopt a longer
interval when there are a large number of users (more than 1000, inclusive).
Table 5 shows the recommended ratios of the interval to the number of users..