User manual

APS User Manual
288
1. Check “Enabled”.
2. Specify IP address or Hostname for TACACS+ Server.
3. Specify Authentication Port for TACACS+ Server (Default is 49).
4. Specify the Secret with TACACS+ Server.
Parameter Description
Timeout: The Timeout, which can be set to a number between 3 and 3600 seconds, is
the maximum time to wait for a reply from a server.
If the server does not reply within this timeframe, we will consider it to be
dead and continue with the next enabled server (if any).
RADIUS servers are using the UDP protocol, which is unreliable by design. In
order to cope with lost frames, the timeout interval is divided into 3
subintervals of equal length. If a reply is not received within the subinterval,
the request is transmitted again. This algorithm causes the RADIUS server to
be queried up to 3 times before it is considered to be dead.
Dead Time: The Dead Time, which can be set to a number between 0 and 3600 seconds,
is the period during which the switch will not send new requests to a server
that has failed to respond to a previous request. This will stop the switch
from continually trying to contact a server that it has already determined as
dead.
Fig. 137 AAA Configuration