2-27To do… Use the command… RemarksHWTACACS scheme viewnas-ip ip-addressSet the source IP address ofoutgoing HWTACACSmessages System viewhwtacacs nas-ip ip-addressOptionalBy default, no source IP address isset; the IP address of thecorresponding outbound interfaceis used as the source IP address.Generally, the access users are named in the userid@isp-name or userid.isp-name format. Where,isp-name after the “@” or “.” character represents the ISP domain name. If the TACACS server doesnot accept the usernames that carry ISP domain names, it is necessary to remove domain names fromusernames before they are sent to TACACS server.Configuring the Timers Regarding TACACS ServersFollow these steps to configure the timers regarding TACACS servers:To do… Use the command… RemarksEnter system view system-view —Create a HWTACACS scheme andenter its viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, no HWTACACSscheme exists.Set the response timeout time ofTACACS servers timer response-timeout secondsOptionalBy default, the response timeouttime is five seconds.Set the time that the switch mustwait before it can restore the statusof the primary server to activetimer quiet minutesOptionalBy default, the switch must waitfive minutes before it can restorethe status of the primary server toactive.Set the real-time accountingintervaltimer realtime-accountingminutesOptionalBy default, the real-timeaccounting interval is 12 minutes.z To control the interval at which users are charge in real time, you can set the real-time accountinginterval. After the setting, the switch periodically sends online users' accounting information to theTACACS server at the set interval.z The real-time accounting interval must be a multiple of 3.z The setting of real-time accounting interval somewhat depends on the performance of theTACACS client and server devices: A shorter interval requires higher device performance.
