HP FlexNetwork 7500 Series, Справочник по командам

Страница: 87 / 738

72
When you configure RADIUS attribute conversion rules, follow these restrictions and guidelines:
•
The source and destination RADIUS attributes in a rule must use the same data type.
•
The source and destination RADIUS attributes in a rule cannot use the same name.
•
A source RADIUS attribute can be converted only by one criterion, packet type or direction.
•
One source RADIUS attribute cannot be converted to multiple destination attributes.
If you do not specify a source RADIUS attribute, the undo attribute convert command deletes all
RADIUS attribute conversion rules.
Examples
# In RADIUS DAS view, configure a RADIUS attribute conversion rule to replace the
Ab-Server-String attribute in the received DAE packets with the Cd-User-Roles attribute.
<Sysname> system-view
[Sysname] radius dynamic-author server
[Sysname-radius-da-server] attribute convert Ab-Server-String to Cd-User-Roles received
Related commands
attribute translate
attribute convert (RADIUS scheme view)
Use attribute convert to configure a RADIUS attribute conversion rule.
Use undo attribute convert to delete RADIUS attribute conversion rules.
Syntax
attribute convert src-attr-name to dest-attr-name { { access-accept | access-request |
accounting } * | { received | sent } * }
undo attribute convert [ src-attr-name ]
Default
No RADIUS attribute conversion rules exist. The system processes RADIUS attributes according to
the principles of the standard RADIUS protocol.
Views
RADIUS scheme view
Predefined user roles
network-admin
mdc-admin
Parameters
src-attr-name : Specifies the source RADIUS attribute by its name, a case-insensitive string of 1 to 63
characters. The attribute must be supported by the system.
dest-attr-name : Specifies the destination RADIUS attribute by its name, a case-insensitive string of 1
to 63 characters. The attribute must be supported by the system.
access-accept : Specifies the RADIUS Access-Accept packets.
access-request : Specifies the RADIUS Access-Request packets.
accounting : Specifies the RADIUS accounting packets.
received : Specifies the received RADIUS packets.
sent : Specifies the sent RADIUS packets.