Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-60
z
Appropriately setting the timeout time of this timer according to the network
situation can improve the performance of the system.
z
The product of the maximum RADIUS packet transmission attempts and the
response timeout timer for the RADIUS server can be no more than 75 seconds.
Related command:
radius scheme
and
retry
.
Example
# Set the response timeout time in the RADIUS scheme radius1 to five seconds.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] radius scheme radius1
New Radius scheme
[Sysname-radius-radius1] timer response-timeout 5
1.2.30 user-name-format
Syntax
user-name-format
{
with-domain
|
without-domain
}
View
RADIUS scheme view
Parameter
with-domain
: Specifies to include ISP domain names in the user names to be sent to
RADIUS servers.
without-domain
: Specifies to exclude ISP domain names from the user names to be
sent to RADIUS servers.
Description
Use the
user-name-format
command to set the format of the user names to be sent to
RADIUS server
By default, except for the default RADIUS scheme "system", the user names sent to
RADIUS servers in any RADIUS scheme carry ISP domain names.
Note that:
z
Generally, an access user is named in the
userid@isp-name
format. Where,
isp-name
behind the
@
character represents the ISP domain name, by which the
device determines which ISP domain it should ascribe the user to. However, some
old RADIUS servers cannot accept the user names that carry ISP domain names.
In this case, it is necessary to remove the domain names carried in the user
names before sending the user names to the RADIUS server. For this reason, the
