AAA and RADIUS Protocol Configuration
275
When using
scheme radius-scheme
radius-scheme-name
local
in the
configuraton command, the local refers to the alternative authentication scheme if
the RADIUS server does not respond normally. Therefore, when RADIUS server
operates normally, the local scheme is not used. Otherwise, the local scheme is
used. When using
scheme radius-scheme
radius-scheme-name
(without
local
),
the local scheme does not work when there is no normal response.
You can use either
scheme
or
radius-scheme
command to specify the RADIUS
scheme for an ISP domain. If both of these two commands are used, the latest
configuration will take effect.
Configuring ISP Domain State
Every ISP has active/block states. If an ISP domain is in active state, the users in it
can request for network service, while in block state, its users cannot request for
any network service, which will not affect the users already online.
Table 303
Configuring ISP Domain State
By default, after an ISP domain is created, the state of the domain is
active
.
Setting Access Limit
Maximum number of users specifies how many users can be contained in the ISP.
For any ISP domain, there is no limit to the number of users by default.
Table 304
Setting Access Limit
By default, there is no limit to the amount of users.
Enabling/Disabling the Idle-Cut Function
The idle cut function means if the traffic from a certain connection is lower than
the defined traffic, this connection is cut off.
Table 305
Enabling/Disabling the Idle-cut Function
By default, the idle-cut function is disabled.
Enabling the Selection of the RADIUS Accounting Option
If no RADIUS server is available or if the RADIUS accounting server fails when the
accounting optional
is configured, the user can still use the network resource,
otherwise, the user will be disconnected. The user configured with the
accounting
optional
command in RADIUS scheme will no longer send real-time
accounting update packets or offline accounting packets.
Operation
Command
Specify the ISP domain state to be active
state active
Specify the ISP domain state to be block
state block
Operation
Command
Set a limit to the amount of users
access-limit { disable | enable
max_user_number
}
Restore the limit to the default setting
undo access-limit
Operation
Command
Set the idle
idle-cut enable
minute flow
Disable the idle-cut function
idle-cut disable
Summary of Contents for SuperStack 4
Page 6: ...18 ABOUT THIS GUIDE ...
Page 34: ...46 CHAPTER 1 GETTING STARTED ...
Page 62: ...74 CHAPTER 3 VLAN OPERATION ...
Page 69: ...PoE Configuration 81 ...
Page 70: ...82 CHAPTER 4 POWER OVER ETHERNET POE CONFIGURATION ...
Page 98: ...110 CHAPTER 5 NETWORK PROTOCOL OPERATION ...
Page 220: ...232 CHAPTER 8 ACL CONFIGURATION ...
Page 408: ...420 CHAPTER B RADIUS SERVER AND RADIUS CLIENT SETUP ...
Page 432: ...444 APPENDIX D 3COM XRN ...