Specifying A Nas Id Profile For An Interface - HP 6600 Security Configuration Manual

Step
3. Configure the NAS-Port-ID
value.

Specifying a NAS ID profile for an interface

In some networks, user access points are identified by their access VLANs. Network carriers need to use
NAS-identifiers to identify user access points. With the NAS ID profile specified on an interface, when a
user logs in from the interface, the access device checks the specified profile to obtain the NAS ID that
is bound with the access VLAN. The value of this NAS ID is used as the NAS-identifier attribute in the
RADIUS packets to be sent to the RADIUS server.
The NAS ID profile defines the binding relationship between VLANs and NAS IDs. A NAS ID-VLAN
binding is defined by the nas-id id-value bind vlan vlan-id command, which is described in detail in AAA
configuration commands in the Security Command Reference.
If no NAS-ID profile is specified for an interface or no matching binding is found in the specified profile:
If the NAS ID is configured using the portal nas-id command, the device uses the configured NAS
•
ID as that of the interface.
If the interface does not support NAS ID configuration, or has no NAS ID configured, the device
•
uses the device name as the interface NAS ID.
To configure a NAS ID profile on an interface:
Step
1. Enter system view.
2. Create a NAS ID profile and
enter NAS ID profile view.
3. Bind a NAS ID with a VLAN.
4. Return to system view.
5. Enter interface view.
6. Specify a NAS ID profile for
the interface.
Command
portal nas-port-id nas-port-id-value
Command
system-view
aaa nas-id profile profile-name
nas-id nas-identifier bind vlan
vlan-id
quit
interface interface-type
interface-number
portal nas-id-profile profile-name
139
Remarks
By default, no NAS-Port-ID value is
specified for an interface, and the
device uses the information
obtained from the physical
interface where the portal user
accesses as the NAS-Port-ID value
in a RADIUS request.
Remarks
N/A
For more information about the
command, see Security Command
Reference.
For more information about the
command, see Security Command
Reference.
N/A
N/A
By default, an interface is specified
with no NAS ID profile.