max-ipuser-reauthtime

Function

The max-ipuser-reauthtime command sets the maximum reauthentication time of a domain.

The undo max-ipuser-reauthtime command restores the maximum reauthentication time of a domain to the default value.

By default, the maximum reauthentication time of a domain is 300 seconds.

This command is supported only on the NetEngine 8000 F1A.

Format

max-ipuser-reauthtime time-value

undo max-ipuser-reauthtime

Parameters

Parameter	Description	Value
time-value	Specifies the maximum reauthentication time of a domain.	The value ranges from 0 to 65535, in seconds. Value 0 indicates that re-authentication is not triggered.

Parameter

Description

Value

time-value

Specifies the maximum reauthentication time of a domain.

The value ranges from 0 to 65535, in seconds. Value 0 indicates that re-authentication is not triggered.

Views

AAA domain view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
aaa-access	write

Usage Guidelines

Usage Scenario

If a pre-domain user (Layer-3 pre-connection user) has not passed authentication within the re-authentication timeout period, the NetEngine 8000 F disconnects this user.

Precautions

In VS mode, this command is supported only by the admin VS.

If the re-authentication timeout period is less than 180 seconds, users may be logged out.

Example

# Set the re-authentication timeout period to 300 seconds.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] domain huawei
[*HUAWEI-aaa-domain-huawei] commit
[~HUAWEI-aaa-domain-huawei] max-ipuser-reauthtime 300