25
To specify a VPN for a RADIUS scheme:
Step Command
1.
Enter system view.
system-view
2.
Enter RADIUS scheme view.
radius scheme
radius-scheme-name
3.
Specify a VPN for the RADIUS scheme.
vpn-instance
vpn-instance-name
Setting the username format and traffic statistics units
A username is usually in the format of
userid
@
isp-name
, where
isp-name
represents the name of the ISP
domain the user belongs to and is used by the switch to determine which users belong to which ISP
domains. However, some earlier RADIUS servers cannot recognize usernames that contain an ISP
domain name. In this case, the switch must remove the domain name of each username before sending
the username. You can set the username format on the switch for this purpose.
The switch periodically sends accounting updates to RADIUS accounting servers to report the traffic
statistics of online users. For normal and accurate traffic statistics, make sure the unit for data flows and
that for packets on the switch are consistent with those on the RADIUS server.
Follow these guidelines when you set the username format and the traffic statistics units for a RADIUS
scheme:
•
If a RADIUS scheme defines that the username is sent without the ISP domain name, do not apply
the RADIUS scheme to more than one ISP domain. Otherwise, users using the same username but
in different ISP domains are considered the same user.
•
For level switching authentication, the
user-name-format keep-original
and
user-name-format
without-domain
commands produce the same results. They make sure usernames sent to the
RADIUS server carry no ISP domain name.
To set the username format and the traffic statistics units for a RADIUS scheme:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter RADIUS scheme view.
radius scheme
radius-scheme-name
N/A
3.
Set the format for usernames
sent to the RADIUS servers.
user-name-format
{
keep-original
|
with-domain
|
without-domain
}
Optional.
By default, the ISP domain name is
included in a username.
4.
Specify the unit for data flows
or packets sent to the RADIUS
servers.
data-flow-format
{
data
{
byte
|
giga-byte
|
kilo-byte
|
mega-byte
}
|
packet
{
giga-packet
|
kilo-packet
|
mega-packet
|
one-packet
} }*
Optional.
The default unit is
byte
for data
flows and is
one-packet
for data
packets.
Setting the supported RADIUS server type
The supported RADIUS server type determines the type of the RADIUS protocol that the switch uses to
communicate with the RADIUS server. It can be standard or extended:
•
Standard
—Uses the standard RADIUS protocol, compliant to RFC 2865 and RFC 2866 or later.
•
Extended
—Uses the proprietary RADIUS protocol of HP.
