3com WX3000 User Manual

Page of 715
 
2-24 
 
Generally, the access users are named in the userid@isp-name or userid.isp-name format. Where, 
isp-name after the “@” or “.” character represents the ISP domain name. If the TACACS server does not 
accept the user names that carry ISP domain names, it is necessary to remove domain names from 
user names before they are sent to TACACS server.  
 
Configuring the Timers Regarding TACACS Servers 
Follow these steps to configure the timers regarding TACACS servers: 
To do… 
Use the command… 
Remarks 
Enter system view 
system-view 
— 
Create a HWTACACS scheme 
and enter its view 
hwtacacs scheme 
hwtacacs-scheme-name 
Required 
By default, no HWTACACS 
scheme exists. 
Set the response timeout time 
of TACACS servers 
timer response-timeout 
seconds 
Optional 
By default, the response timeout 
time is five seconds. 
Set the time that the device 
must wait before it can restore 
the status of the primary server 
to active 
timer quiet minutes 
Optional 
By default, the device must wait 
five minutes before it can restore 
the status of the primary server to 
active. 
Set the real-time accounting 
interval 
timer realtime-accounting 
minutes 
Optional 
By default, the real-time 
accounting interval is 12 minutes. 
 
 
To control the interval at which users are charge in real time, you can set the real-time accounting 
interval. After the setting, the device periodically sends online users' accounting information to the 
TACACS server at the set interval.  
The real-time accounting interval must be a multiple of 3. 
The setting of real-time accounting interval somewhat depends on the performance of the 
TACACS client and server devices: A shorter interval requires higher device performance.