No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Fat AP and Cloud AP V200R010C00 Command Reference

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
radius-server retransmit timeout dead-time

radius-server retransmit timeout dead-time

Function

The radius-server retransmit timeout dead-time command sets the number of times that RADIUS request packets are retransmitted, timeout period, and interval for the server to revert to the active status.

The undo radius-server retransmit timeout dead-time command restores the default number of retransmission times, the default timeout period, and the default interval for the server to revert to the active status.

By default, the number of retransmission times is 3, timeout period is 5 seconds, and the interval for the server to revert to the active status is 5 minutes.

Format

radius-server { retransmit retry-times | timeout time-value | dead-time dead-time } *

undo radius-server { retransmit [ retry-times ] | timeout [ time-value ] | dead-time [ dead-time ] } *

Parameters

Parameter

Description

Value

retransmit retry-times

Specifies the number of retransmission times. The value is the total number of times a packet is transmitted.

The value is an integer that ranges from 1 to 5.

timeout time-value

Specifies the timeout period.

The value is an integer that ranges from 1 to 10, in seconds.

dead-time dead-time

Specifies the interval for the server to revert to the active status.

The value is an integer that ranges from 1 to 65535, in minutes.

Views

RADIUS server template view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

The retransmission upon timeout mechanism is configured for a device to forward RADIUS Access-Request packets sourced from users to the server. The overall retransmission time depends on the retransmission interval, retransmission times, RADIUS server status, and number of servers configured in the RADIUS server template.

You can configure the number of times that RADIUS request packets are retransmitted and the timeout period using the radius-server retransmit retry-times and radius-server timeout time-value commands, respectively. If a device sends an authentication request packet to the RADIUS server and does not receive any response packet from the server during the timeout period, the device sends an authentication request packet again.

You can run the radius-server dead-time dead-time command to configure the duration for which the RADIUS server status remains Down. After the device sets the RADIUS server status to Down and the interval specified by dead-time expires, the device resets the server status to Force-up. If a new user needs to be authenticated in RADIUS mode and no RADIUS server is available, the device attempts to re-establish a connection with a RADIUS server in Force-up status. The Force-up status is defined to prevent servers in Down status from remaining idle.

After automatic detection is enabled, the device immediately sends a detection packet to the RADIUS server in Force-up status. If a packet is received from the RADIUS server within the timeout period, the device sets the RADIUS server status to Up; otherwise, the device sets the RADIUS server status to Down. If automatic detection is disabled, the device can update the RADIUS server status only after receiving an authentication request packet from the user.

This command can improve the reliability of RADIUS authentication.

Precautions

  • The request packet retransmission time (number of retransmission times x timeout period) of the RADIUS server must be shorter than the request packet retransmission time of the Portal server.
  • If more than 8 authentication server IP addresses are configured in the RADIUS server template, reduce the number of retransmission times and timeout period.

Example

# Set the number of retransmission times to 3, the timeout period to 2s, and the interval for the server to revert to the active status to 10 minutes.

<Huawei> system-view
[Huawei] radius-server template test1
[Huawei-radius-test1] radius-server retransmit 3 timeout 2 dead-time 10
Translation
Download
Updated: 2019-11-21

Document ID: EDOC1100064352

Views: 198910

Downloads: 122

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next