Command Manual (For Soliton) – AAA
H3C S3100 Series Ethernet Switches
Chapter 1 AAA Configuration Commands
1-65
Examples
# Set the response timeout time in RADIUS scheme radius1 to five seconds.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] radius scheme radius1
New Radius scheme
[Sysname-radius-radius1] timer response-timeout 5
1.2.33 user-name-format
Syntax
user-name-format
{
with-domain
|
without-domain
}
View
RADIUS scheme view
Parameters
with-domain
: Specifies to include ISP domain names in the usernames to be sent to
RADIUS server.
without-domain
: Specifies to exclude ISP domain names from the usernames to be
sent to RADIUS server.
Description
Use the
user-name-format
command to set the format of the usernames to be sent to
RADIUS server
By default, except for the default RADIUS scheme "system", the usernames sent to
RADIUS servers in any RADIUS scheme carry ISP domain names.
Note that:
z
Generally, an access user is named in the
userid@isp-name
format. Here,
isp-name
behind the
@
character represents the ISP domain name, by which the
device determines which ISP domain a user belongs to. However, some old
RADIUS servers cannot accept the usernames that carry ISP domain names. In
this case, it is necessary to remove domain names from usernames before
sending usernames to RADIUS server. For this reason, the
user-name-format
command is designed for you to specify whether or not ISP domain names are
carried in the usernames to be sent to the RADIUS server.
z
For a RADIUS scheme, if you have specified to exclude ISP domain names from
usernames, you should not use this RADIUS scheme in more than one ISP
domain. Otherwise, such errors may occur: the RADIUS server regards two
different users having the same name but belonging to different ISP domains as
the same user (because the usernames sent to it are the same).