Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-6
z
When the system charges an online user but it does not find any available
RADIUS accounting server or fails to communicate with any RADIUS accounting
server, the user can continue the access to network resources if the
accounting
optional
command has been used; otherwise, the user is disconnected from the
system. The
accounting optional
command is often used in the cases where
only authentication is needed and no accounting is needed.
z
With the
accounting optional
command executed, the system does not send real
time accounting updating packets and accounting-stop packets to all users in
RADIUS scheme.
Example
# Open the accounting-optional switch for the ISP domain named aabbcc.net.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain aabbcc.net
[Sysname-isp-aabbcc.net] accounting optional
1.1.6 attribute
Syntax
attribute
{
ip ip-address
|
mac mac-address
|
idle-cut
minute
|
access-limit
max-user-number
|
vlan vlan-id
|
location
{
nas-ip ip-address port portnum
|
port
portnum
} } *
undo attribute
{
ip
|
mac
|
idle-cut
|
access-limit
|
vlan
|
location
}*
View
Local user view
Parameter
ip ip-address
: Sets the IP address of the user. The
attribute ip
command for a local
user only applies to H3C 802.1x clients. If you configure this command on a non-H3C
client, local authentication will fail.
mac mac-address
: Sets the MAC address of the user. Where,
mac-address
is in
H-H-H
format.
idle-cut
minute
: Allows the local user to enable the idle-cut function. Where,
minute
is
the idle time before cutting down, which ranges from 1 minutes to 120 minutes.
access-limit max-user-number
: Sets the maximum number of users who can access
the switch with current user name. Where,
max-user-number
ranges from 1 to 1024.
vlan vlan-id
: Sets the VLAN attribute of the user (that is, which VLAN the user belongs
to). Where,
vlan-id
is an integer ranging from 1 to 4094.
location
: Sets the port binding attribute of the user.
