H3C Technologies H3C WX3000 Series Unified Switches - Manual (Page 274)

25-22
To do… Use the command… Remarks
HWTACACS scheme view
nas-ip ip-address
Set the source IP address
of outgoing HWTACACS
messages
System view
hwtacacs nas-ip ip-address
Optional
By default, no source IP address is set;
the IP address of the corresponding
outbound interface is used as the
source IP address.
Generally, the access users are named in the userid@isp-name or userid.isp-name format. Where,
isp-name after the “@” or “.” character represents the ISP domain name. If the TACACS server does not
accept the user names that carry ISP domain names, it is necessary to remove domain names from
user names before they are sent to TACACS server.
Configuring the Timers Regarding TACACS Servers
Follow these steps to configure the timers regarding TACACS servers:
To do… Use the command… Remarks
Enter system view system-view —
Create a HWTACACS scheme and
enter its view hwtacacs scheme
hwtacacs-scheme-name
Required
By default, no HWTACACS scheme
exists.
Set the response timeout time of
TACACS servers timer response-timeout
seconds
Optional
By default, the response timeout time
is five seconds.
Set the time that the device must
wait before it can restore the status
of the primary server to active
timer quiet minutes
Optional
By default, the device must wait five
minutes before it can restore the status
of the primary server to active.
Set the real-time accounting
interval timer realtime-accounting
minutes
Optional
By default, the real-time accounting
interval is 12 minutes.
z
To control the interval at which users are charge in real time, you can set the real-time accounting
interval. After the setting, the device periodically sends online users' accounting information to the
TACACS server at the set interval.
z
The real-time accounting interval must be a multiple of 3.
z
The setting of real-time accounting interval somewhat depends on the performance of the
TACACS client and server devices: A shorter interval requires higher device performance.