radius-server detect-server timeout

Function

The radius-server detect-server timeout command configures the timeout period for RADIUS detection packets.

The undo radius-server detect-server timeout command restores the default settings.

By default, the timeout period for RADIUS detection packets is 3 seconds.

Format

radius-server detect-server timeout timeout

undo radius-server detect-server timeout

Parameters

Parameter	Description	Value
timeout	Specifies the timeout period for RADIUS detection packets.	The value is an integer that ranges from 1 to 10, in seconds.

Views

RADIUS server template view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

After the automatic detection function is enabled using the radius-server testuser command and the device sends detection packets to the RADIUS server, the device determines whether to switch the RADIUS server status based on whether it receives response packets from the RADIUS server within the timeout period. The following table lists the switchover conditions.

After the automatic detection function is enabled, automatic detection is classified into the following conditions depending on differences of the RADIUS server status.

Server Status	Whether Automatic Detection Is Supported	Time When an Automatic Detection Packet Is Sent	Condition for Switching the Server Status
Down	Automatic detection is supported by default.	An automatic detection packet is sent after the automatic detection period expires.	If the device receives a response packet from the RADIUS server within the timeout period for detection packets, the device marks the RADIUS server status as Up; otherwise, the RADIUS server status remains Down.
Up	Automatic detection can be enabled using the radius-server detect-server up-server interval command.	An automatic detection packet is sent after the automatic detection period expires.	If the conditions for marking the RADIUS server status as Down are met, the device marks the RADIUS server status as Down; otherwise, the RADIUS server status remains Up.
Force-up	Automatic detection is supported by default.	An automatic detection packet is sent immediately.	If the device receives a packet from the RADIUS server within the timeout period, the device marks the RADIUS server status as Up; otherwise, the device marks the RADIUS server status as Down.

On a large-scale network, you are not advised to enable automatic detection for RADIUS servers in Up status. This is because if automatic detection is enabled on multiple NAS devices, the RADIUS server periodically receives a large number of detection packets when processing RADIUS Access-Request packets source from users, which may deteriorate processing performance of the RADIUS server.

Precautions

You can run the radius-server detect-server timeout command to adjust the timeout period for RADIUS detection packets based on the actual response rate of the RADIUS server. You are advised to set a timeout period for RADIUS detection packets smaller than the automatic detection interval to prevent the device from sending a detection packet again before completing processing the response packet from the RADIUS server. If the actual timeout period for RADIUS detection packets is larger than the automatic detection interval, the smaller value is the timeout period, namely:

For the RADIUS server in Down status, the smaller one between values configured using the radius-server detect-server timeout and radius-server detect-server interval commands is the timeout period for detection packets.
For the RADIUS server in Up status, the smaller one between values configured using the radius-server detect-server timeout and radius-server detect-server up-server interval command is the timeout period for detection packets.

Example

# Set the timeout period for RADIUS detection packets to 5 seconds in the RADIUS server template acs.

<sysname> system-view
[sysname] radius-server template acs
[sysname-radius-acs] radius-server detect-server timeout 5