Installation manual

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol
Configuration
Huawei Technologies Proprietary
2-13
Table 2-13 Setting RADIUS packet encryption key
Operation Command
Set RADIUS authentication/authorization packet
encryption key
key authentication string
Restore the default RADIUS
authentication/authorization packet encryption key.
undo k
ey authentication
Set RADIUS accounting packet key
key accoun
ting string
Restore the defa accounting packet key
und nting
ult RADIUS
o key accou
By default, ackets
a
2.3.4 Setting Response Ti
A uthorization or a st packet has been
tr eceived the response from RADIUS
s t er.
Y se timeout timer of RADIUS server
P s
T
the keys of RADIUS authentication/authorization and accounting p
re all “huawei”.
meout Timer of RADIUS Server
fter RADIUS (authentication/a ccounting) reque
ansmitted for a period of time, if NAS has not r
erver, it has to retransmit the request to guaran
ee RADIUS service for the us
ou can use the following command to set respon
erform the following configurations in RADIUS
.
cheme view.
able 2-14 Setting response timeout timer of RADIUS server
Operation Command
Set response timeout timer of RADIUS server
timer seconds
Restore the response timeout timer of RADIUS
undo timer
server to
default value
y default, timeout timer of RADIUS server is 3 seconds.
2.3.5 Sett
d.
B
ing Retransmission Times of RADIUS Request Packet
Since RADIUS protocol uses UDP packet to carry the data, the communication process
is not reliable. If the RADIUS server has not responded NAS before timeout, NAS has
to retransmit RADIUS request packet. If it transmits more than the specified retry-times,
NAS considers the communication with the primary and secondary RADIUS servers
has been disconnecte
You can use the following command to set retransmission times of RADIUS request
packet.
Perform the following configurations in RADIUS scheme view.