H3C H3C S3600 Series, Руководство по управлению

Страница: 572 / 1277

1-55
View
RADIUS scheme view
Parameters
with-domain
: Specifies to include ISP domain names in the usernames to be sent to RADIUS server.
without-domain
: Specifies to exclude ISP domain names from the usernames to be sent to RADIUS
server.
Description
Use the
user-name-format
command to set the format of the usernames to be sent to RADIUS server
By default, except for the default RADIUS scheme "system", the usernames sent to RADIUS servers in
any RADIUS scheme carry ISP domain names.
Note that:
z
Generally, an access user is named in the
userid@isp-name
format. Here,
isp-name
behind the
@
character represents the ISP domain name, by which the device determines which ISP domain a
user belongs to. However, some old RADIUS servers cannot accept the usernames that carry ISP
domain names. In this case, it is necessary to remove domain names from usernames before
sending usernames to RADIUS server. For this reason, the
user-name-format
command is
designed for you to specify whether or not ISP domain names are carried in the usernames to be
sent to the RADIUS server.
z
For a RADIUS scheme, if you have specified to exclude ISP domain names from usernames, you
should not use this RADIUS scheme in more than one ISP domain. Otherwise, such errors may
occur: the RADIUS server regards two different users having the same name but belonging to
different ISP domains as the same user (because the usernames sent to it are the same).
z
For an 802.1x user, if you have specified to use EAP authentication, the switch will encapsulate
and send the contents from the client directly to the server. In this case, the configuration of the
user-name-format
command is not effective.
Related commands:
radius scheme
.
Examples
# Specify to exclude ISP domain names from the usernames to be sent to RADIUS server in RADIUS
scheme radius1.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] radius scheme radius1
New Radius scheme
[Sysname-radius-radius1] user-name-format without-domain
HWTACACS Configuration Commands
data-flow-format
Syntax
data-flow-format data
{
byte | giga-byte | kilo-byte | mega-byte
}
data-flow-format packet
{
giga-packet | kilo-packet | mega-packet | one-packet
}