Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol
Configuration
Huawei Technologies Proprietary
2-18
Perform the following configurations in RADIUS scheme view.
Table 2-23
Setting RADIUS server state
Operation
Command
Set the state of primary RADIUS
server
state
primary
{
accounting
|
authentication
} {
block
|
active
}
Set the state of second RADIUS
server
state secondary
{
accounting
|
authentication
} {
block
|
active
}
By default, the state of each server in RADIUS scheme is
active
.
2.3.13 Setting Username Format Transmitted to RADIUS Server
As mentioned above, the supplicants are generally named in userid@isp-name format.
The part following “@” is the ISP domain name. Quidway Series Switches will put the
users into different ISP domains according to the domain names. However, some
earlier RADIUS servers reject the username including ISP domain name. In this case,
you have to remove the domain name before sending the username to the RADIUS
server. The following command of switch decides whether the username to be sent to
RADIUS server carries ISP domain name or not.
Perform the following configurations in RADIUS scheme view.
Table 2-24
Setting username format transmitted to RADIUS server
Operation
Command
Set Username Format Transmitted to
RADIUS Server
user-name-format
{
with-domain
|
without-domain
}
Note:
If a RADIUS scheme is configured not to allow usernames including ISP domain names,
the RADIUS scheme shall not be simultaneously used in more than one ISP domain.
Otherwise, the RADIUS server will regard two users in different ISP domains as the
same user by mistake, if they have the same username (excluding their respective
domain names.)
By default, as for the newly created RADIUS scheme, the username sent to RADIUS
servers includes an ISP domain name; as for the "system" RADIUS scheme created by
the system, the username sent to RADIUS servers excludes the ISP domain name.
