`radius-server host tls time-window`

Syntax

radius-server host <IP-ADDR/FQDN> tls time-window <Seconds>

no radius-server host <IP-ADDR/FQDN> tls time-window <Seconds>

Description

The time-window sub-command of tls configures the time window (in seconds) within which the RADIUS packets carrying the Event-Timestamp attribute is considered as current and accepted for processing by the NAS and the RADIUS TLS Server. A non-zero value indicates that the Event-Timestamp attribute must be used in the dynamic authorization communication exchange between the switch and the RADIUS server. Zero value disables the Event-Timestamp attribute checking. Default time window is 300 seconds.

The no form of the command sets the value to zero. Zero value disables the Event-Timestamp attribute checking.

Command context

config

Parameters

IP-ADDR: Specifies server IPv4 address.
FQDN: Specifies server FQDN.

Example

switch(config)# radius-server host 10.2.97.10 tls time-window
 <0-65535>             The window size in seconds.
 positive-time-window  Sets the current acceptable time-window as default (+)
                       time-window value for dynamic authorization messages.
 plus-or-minus-time-window Sets the current acceptable time-window as (+/-)
                       time-window value for dynamic authorization messages.