1-76
sending usernames to TACACS server. For this reason, the
user-name-format
command is
designed for you to specify whether or not ISP domain names are carried in the usernames to be
sent to TACACS server.
z
For a HWTACACS scheme, if you have specified to exclude ISP domain names from usernames,
you should not use this scheme in more than one ISP domain. Otherwise, such errors may occur:
the TACACS server regards two different users having the same name but belonging to different
ISP domains as the same user (because the usernames sent to it are the same).
Related commands:
hwtacacs scheme
.
Examples
# Specify to exclude ISP domain names from the usernames to be sent to TACACS server in
HWTACACS scheme hwt1.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] user-name-format without-domain
Summary of Contents for 5500-EI Series
Page 43: ...2 6 ...
Page 76: ...1 17 ...
Page 228: ...ii stp transmit limit 1 44 vlan mapping modulo 1 45 vlan vpn tunnel 1 46 ...
Page 477: ...5 24 Sysname vlan 2 Sysname vlan2 service type multicast ...
Page 503: ...2 3 System View return to User View with Ctrl Z Sysname dot1x url http 192 168 19 23 ...
Page 519: ...iii ...
Page 597: ...2 2 security policy server 192 168 0 1 user name format without domain ...
Page 648: ...1 9 Examples Clear static ARP entries Sysname reset arp static ...
Page 663: ...4 3 Sysname resilient arp interface vlan interface 2 ...
Page 767: ...1 28 From 12 00 Jan 1 2008 to 12 00 Jun 1 2008 ...
Page 1111: ...ii xmodem get 3 18 ...
Page 1314: ...A 44 Z ...