Manualshelf

Users Guide

ManualsBrandsDell ManualsAccess PlatformsW-Series Controller AOS
201202203204205206207208209210
Table Of Contents
202| Authentication Servers Dell Networking W-Series ArubaOS 6.5.x| User Guide
TACACS+ Accounting
TACACS+ accounting allows commands issued on the controller to be reported to TACACS+ servers. You can
specify which types of commands are reported (action, configuration, or show commands), or report all
commands.
You can only configure TACACS+ accounting through the CLI:
(host)(config) #aaa tacacs-accounting server-group <group> command
{action|all|configuration|show} mode {enable|disable}
Configuring Authentication Timers
Table 46 describes the timers you can configure for all clients and servers. These timers can be left at their
default values for most implementations.
Timer Description
User Idle Timeout Maximum period after which a client is considered idle if there is no
wireless traffic from the client. The timeout period is reset if there is
wireless traffic. If there is no wireless traffic in the timeout period, the
client is aged out. Once the timeout period has expired, the user is
removed. If the keyword seconds is not specified, the value defaults
to minutes at the command line.
Range: 1–255 minutes (30–15300 seconds)
Default: 5 minutes (300 seconds)
Authentication Server
Dead Time
Maximum period, in minutes, that the controller considers an
unresponsive authentication server to be “out of service.”
This timer is only applicable if there are two or more authentication
servers configured on the controller. If there is only one
authentication server configured, the server is never considered out
of service, and all requests are sent to the server.
If one or more backup servers are configured and a server is
unresponsive, it is marked as out of service for the dead time;
subsequent requests are sent to the next server on the priority list
for the duration of the dead time. If the server is responsive after the
dead time has elapsed, it can take over servicing requests from a
lower-priority server; if the server continues to be unresponsive, it is
marked as down for the dead time.
Range: 0–50 minutes
Default: 10 minutes
Logon User Lifetime Maximum time, in minutes, unauthenticated clients are allowed to
remain logged on.
Range: 0–255 minutes
Default: 5 minutes
User Interim stats
frequency
Sets the timeout value for user stats, reporting in minutes or
seconds.
Range:300–600 seconds, or 5–10 minutes
Default: 600 seconds
Table 46: Authentication Timers