No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S1720, S2700, S3700, S5700, S6700, S7700, and S9700 Series Switches Common Operation Guide

This document describes the CLI-based configurations of universal protocols and common features for Huawei switches on basic networks.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring the Timeout Period for User Connection

Configuring the Timeout Period for User Connection

Administers

If an administrator does not perform operations on the device for a long time, system resources will be wasted. In this case, the administrator can be disconnected when the time for logging in to the device reaches the specified value. You can use either of the following methods:

  1. Run the idle-timeout minutes [ seconds ] command in the user view to configure the timeout period for user connection.

    <HUAWEI> system-view
    [HUAWEI] user-interface console 0
    [HUAWEI-ui-console0] idle-timeout 10
  2. (Only applicable for AAA local authentication) Run the local-user user-name idle-timeout minutes [ seconds ] command in the AAA view to set the timeout period for user connection.

    <HUAWEI> system-view
    [HUAWEI] aaa
    [HUAWEI-aaa] local-user user1@vipdomain idle-timeout 10
  3. (Only applicable for RADIUS authentication) Configure the RADIUS server to authorize RADIUS attribute 28 (Idle-Timeout) for users who are successfully authenticated and specify the timeout period for user connection.

The priority of method 2 and method 3 is higher than that of method 1. If method 1 and method 2 are configured simultaneously, method 2 takes effect. If method 1 and method 3 are configured simultaneously, method 3 takes effect.

Common access users

If a common access user does not perform operations for a long time after accessing the network, system resources will be wasted. In this case, you can use either of the following methods to disconnect the user:

  1. Run the idle-cut idle-time flow-value command in the service scheme view to disconnect the user whose traffic is lower than the specified threshold within the timeout period.

    <HUAWEI> system-view
    [HUAWEI] aaa
    [HUAWEI-aaa] service-scheme huawei
    [HUAWEI-aaa-service-huawei] idle-cut 1 10
    
  2. Configure the RADIUS server to authorize RADIUS attribute 28 (Idle-Timeout) for the users who is successfully authenticated and specify the timeout period for user connection.

If the above two methods are configured simultaneously, the second method takes effect.

Translation
Download
Updated: 2018-09-03

Document ID: EDOC1000057410

Views: 89154

Downloads: 12189

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next