Huawei Quidway S3100 Series, Руководство по эксплуатации

Страница: 247 / 514

Operation Manual – AAA&RADIUS
Quidway S3100 Series Ethernet Switches
Chapter 1 AAA&RADIUS Configuration
Huawei Technologies Proprietary
1-15
Operation Command Description
Set the VLAN
assignment mode to
integer
vlan-assignment-mode
integer By default, the VLAN
assignment mode is integer.
Set the VLAN
assignment mode to
string
vlan-assignment-mode
string
You can select between this
operation and the above
operation.
Create a VLAN and
enter its view
vlan vlan_id —
Set the assigned
VLAN name
name string
This operation is required if the
VLAN assignment mode is set
to string.
Caution:
z
In string mode, if the VLAN ID assigned by the RADIUS server is a character string
containing only digits (for example, 1024), the switch first regards it as an integer
VLAN ID: the switch transforms the string to an integer value and judges if the value
is in the valid VLAN ID range; if it is, the switch adds the authenticated port to the
VLAN with the value as the VLAN ID (VLAN 1024, for example).
z
To implement dynamic VLAN deliver on a port where both MSTP and 802.1x are
enabled, you must set the MSTP port to an edge port.
1.4.2 Configuring the Attributes of a Local User
When local scheme is chosen as the AAA scheme, you should create local users on
the switch and configure the relevant attributes.
The local users are users set on the switch, with each user uniquely identified by a user
name. To make a user who is requesting network service pass through the local
authentication, you should add an entry in the local user database on the switch for the
user.
Table 1-9 Configure the attributes of a local user
Operation Command Description
Enter system view system-view
—
Add a local user and enter
local user view
local-user user-name
Required
By default, there is no local
user in the system.