Tutorial: Set the Threshold to Disconnect Inactive Clients⁠

• An installed Access Server.

• Console access and the ability to get root access.

You can set the disconnect threshold at the global, group, or user level. Determine which level you want to adjust your threshold settings and use the appropriate value:

1. To set the threshold globally, use __DEFAULT__ as the <USER_OR_GROUP> in the commands in step 2.

2. To set the threshold at a group level, use the group's name as the <USER_OR_GROUP> in the commands in step 2.

3. To set the threshold at a user level, use the user's name as the <USER_OR_GROUP> in the commands in step 2.

1. Sign in to the console.

2. Set the disconnect threshold:

   sacli --user <USER_OR_GROUP> --key "prop_isec" --value <VALUE> UserPropPut
   sacli --user <USER_OR_GROUP> --key "prop_ibytes" --value <VALUE> UserPropPut
   sacli start

   1. 1

      <USER_OR_GROUP>: Use the value from step 1 for your preferred level (global, group, or user).

   2. 2

      prop_isec: Set the value to the number of seconds over which to send bytes in/out.

   3. 3

      prop_ibytes: Set the value to the minimum number of bytes over prop_isec to allow the connection to continue.

   • For example, suppose you want to disconnect users in the admin group (admin-group) when the transmit/receive is below 100000 bytes over a period of five minutes. You would run this command:

     ./sacli --user "admin-group" --key "prop_isec" --value 300 UserPropPut
     ./sacli --user "admin-group" --key "prop_ibytes" --value 100000 UserPropPut
     ./sacli start