cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

568
Views
0
Helpful
3
Replies
Highlighted
Rising star

AAA Accounting Question

I have aaa configured with authentication, authorization, and accounting.  When I make a change that affects connectivity to the AAA server, I can still add commands to the device. However, there is a significant wait time between executing commands.  If I remove aaa accounting, then I can continue to enter commands as normal.  Is there a command to decrease the wait time such as a timeout?

Thanks in advance!

3 REPLIES 3
Highlighted
Beginner

Dear,

 

you can try to use the following command:

 

tacacs-server timeout <seconds>

 

Highlighted
VIP Advisor

Each accounting packet requires an ACK from the AAA server.  I suppose you don't have command authorization enabled or else the whole thing would grind to a halt ;-)

Do you have more than one AAA server defined in a Group perhaps?  I would have thought having an alternative AAA server would resolve that while Primary server was in maintenance.

 

Highlighted

Authorization works because the backup is local.  The issue is that the accounting does not have a local backup.  So, if the accounting server is not reachable on the network, each command entry will wait for the timeout period (I'm guessing). Should I set the timeout to two seconds?

Content for Community-Ad