Huawei Quidway S6500 Series, Руководство по управлению

Страница: 611 / 845

Command Manual - Security
Quidway S6500 Series Ethernet Switches
Chapter 2 AAA Configuration Commands
Huawei Technologies Proprietary
2-45
Example
# Set the response timeout timer in the RADIUS scheme huawei to 5 seconds.
[Quidway-radius-huawei] timer response-timeout 5
2.2.29 user-name-format
Syntax
user-name-format
{
with-domain
|
without-domain
}
View
RADIUS scheme view
Parameter
with-domain
: Specifies to send the username with domain name to RADIUS server.
without-domain
: Specifies to send the username without domain name to RADIUS
server.
Description
Using
user-name-format
command, you can configure the username format sent to
RADIUS server.
By default, as for the newly created RADIUS scheme, the username sent to RADIUS
servers includes an ISP domain name; as for the "system" RADIUS scheme created by
the system, the username sent to RADIUS servers excludes the ISP domain name.
The supplicants are generally named in userid@isp-name format. The part following
“@” is the ISP domain name. The switch will put the users into certain ISP domains
according to the domain names.
However, some earlier RADIUS servers reject the
username including ISP domain name. In this case, the username will be sent to the
RADIUS server after its domain name is removed.
Accordingly, the switch provides this
command to decide whether the username to be sent to RADIUS server carries ISP
domain name or not.
Note:
If a RADIUS scheme is configured to reject usernames including ISP domain names,
the RADIUS scheme shall not be simultaneously used in more than one ISP domains.
Otherwise, the RADIUS server will regard two users in different ISP domains as the
same user by mistake, if they have the same username (excluding their respective
domain names.)