Tearing Down User Connections Forcibly; Configuring A Nas Id-Vlan Binding - HP A6600 Configuration Manual

NOTE:
If you configure accounting optional, the limit on the number of local user connections is not
•
effective.
The accounting method specified with accounting default is for all types of users and has a priority
•
lower than that for a specific access type.
If you specify radius-scheme
•
name
local keyword and argument combination configured when configuring an accounting method,
local accounting is the backup method and is used only when the remote server is not available.
If you specify only the local or none keyword in an accounting method configuration command, the
•
router has no backup accounting method and performs only local accounting or does not perform
any accounting.
Accounting is not supported for FTP services.
•

Tearing down user connections forcibly

To do...
1. Enter system view.
2. Tear down AAA user
connections forcibly (on a
centralized router).
3. Tear down AAA user
connections forcibly (on a
distributed router).

Configuring a NAS ID-VLAN binding

The access locations of users can be identified by their access VLANs. In application scenarios where it
is required to identify the access locations of users, configure NAS ID-VLAN bindings on the router.
Then, when a user gets online, the router obtains the NAS ID by the access VLAN of the user and sends
the NAS ID to the RADIUS server through the NAS-identifier attribute.
To configure a NAS ID-VLAN binding:
To do...
1. Enter system view.
2. Create a NAS ID profile and
enter NAS ID profile view.
radius-scheme-name
local or hwtacacs-scheme
Command...
system-view
cut connection { access-type portal | all |
domain isp-name | interface interface-type
interface-number | ip ip-address | mac mac-
address | ucibindex ucib-index | user-name
user-name}
cut connection { access-type { dot1x | mac-
authentication | portal } | all | domain isp-name
| interface interface-type interface-number | ip
ip-address | mac mac-address | ucibindex ucib-
index | user-name user-name } [ slot slot-number
]
Command...
system-view
aaa nas-id profile profile-name
47
hwtacacs-scheme-
Remarks
—
Required.
Applies only to
portal and PPP user
connections.
Required.
Applies only to LAN,
portal and PPP user
connections.
Remarks
—
Required.
Apply a NAS ID profile to an
interface enabled with portal. See
"Configuring portal."