< Home

user-sync (authentication control device)

Function

The user-sync command enables the user synchronization function on an authentication control device.

The undo user-sync command disables the user synchronization function on an authentication control device.

By default, user synchronization is enabled on an authentication control device, the synchronization interval is 60 seconds, and the number of synchronization attempts is 10.

Format

user-sync { interval interval-value | retry retry-value } *

undo user-sync

Parameters

Parameter

Description

Value

interval interval-value

Specifies the user synchronization interval.

The value is an integer that ranges from 60 to 3600, in seconds. The default value is 60.

retry retry-value

Specifies the maximum number of synchronization attempts.

The value is an integer that ranges from 5 to 300. The default value is 10.

Views

VLANIF interface view, Ethernet interface view, GE interface view, MultiGE interface view, XGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If a user is disconnected from an authentication access device due to online detection or a failure to send a disconnection request message, the user information on the authentication control device and authentication access device cannot be synchronized.

After the user synchronization interval is reached, the number of synchronization attempts is added by 1. If the number of synchronization attempts reaches the maximum, the user is forced offline. If the authentication access device detects that the user is online by sending a synchronization message, the number of synchronization attempts is set to 0.

Precautions

This command is supported only on authentication control devices.

The user synchronization function needs to be enabled on both authentication access devices and authentication control devices to ensure that the function works properly. In addition, the user synchronization interval configured on authentication access devices must be shorter than or equal to that configured on authentication control devices, preventing users from being disconnected due to incorrect synchronization.

Example

# Set the user synchronization interval to 100 seconds and maximum number of synchronization attempts to 15 on GE0/0/1 of the authentication control device.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet0/0/1
[HUAWEI-GigabitEthernet0/0/1] user-sync interval 100 retry 15
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic