H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 439)

423
Item Description
Realtime Accounting
Interval
Set the interval for sending real-time accounting information. The interval must be a
multiple of 3.
To implement real-time accounting, the device must send real-time accounting
packets to the accounting server for online users periodically.
Different real-time accounting intervals impose different performance requirements
on the NAS and the RADIUS server. A shorter interval helps achieve higher
accounting precision but requires higher performance. Use a longer interval when
a large number of users (1000 or more) exist. For more information about the
recommended real-time accounting intervals, see " Configuration guidelines ."
Realtime Accounting
Attempts
Set the maximum number of attempts for sending a real-time accounting request.
Unit for Data Flows
Specify the unit for data flows sent to the RADIUS server, which can be byte,
kilo-byte, mega-byte, or giga-byte.
Unit for Packets
Specify the unit for data packets sent to the RADIUS server, which can be:
• One-packet.
• Kilo-packet.
• Mega-packet.
• Giga-packet.
Enable EAP offload
Enable or disable the EAP offload function.
Some RADIUS servers do not support EAP authentication. They cannot process EAP
packets. In this case, it is necessary to preprocess the EAP packets received from
clients on the access device. This is where the EAP offload function comes in.
After receiving an EAP packet, the access device enabled with the EAP offload
function first converts the authentication information in the EAP packet into the
corresponding RADIUS attributes through the local EAP server, encapsulates the
EAP packet into a RADIUS request and then sends the request to the RADIUS server
for authentication. When the RADIUS server receives the request, it analyzes the
carried authentication information, encapsulates the authentication result in a
RADIUS packet, and then sends the packet to the local EAP server on the access
device for subsequent interaction with the client.
Security Policy Server Specify the IP address of the security policy server.
RADIUS Packet Source IP
Specify the source IP address for the device to use in RADIUS packets sent to the
RADIUS server.
H3C recommends you to use a loopback interface address instead of a physical
interface address as the source IP address, because if the physical interface is
down, the response packets from the server cannot reach the device.
RADIUS Packet Backup
Source IP
Specify the backup source IP address for the device to use in RADIUS packets sent
to the RADIUS server.
In a stateful failover environment, the backup source IP address must be the source
IP address for the remote device to use in RADIUS packets sent to the RADIUS
server.
Configuring the backup source IP address in a stateful failover environment makes
sure that the backup server can receive the RADIUS packets sent from the RADIUS
server when the master device fails.
Buffer stop-accounting
packets Enable or disable buffering of stop-accounting requests for which no responses are
received.