User-Name-Format (Radius Scheme View) - HP FlexNetwork MSR Series Command Reference Manual

user-name-format (RADIUS scheme view)

Use user-name-format to specify the format of the username to be sent to a RADIUS server.
Use undo user-name-format to restore the default.
Syntax
user-name-format { keep-original | with-domain | without-domain }
undo user-name-format
Default
The ISP domain name is included in the usernames sent to the RADIUS servers.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
keep-original: Sends the username to the RADIUS server as the username is entered.
with-domain: Includes the ISP domain name in the username sent to the RADIUS server.
without-domain: Excludes the ISP domain name from the username sent to the RADIUS server.
Usage guidelines
A username is generally in the userid@isp-name format, of which the isp-name argument is used by
the device to determine the ISP domain to which a user belongs. Some earlier RADIUS servers,
however, cannot recognize a username containing an ISP domain name. Before sending a
username including a domain name to such a RADIUS server, the device must remove the domain
name. This command allows you to specify whether to include a domain name in a username sent to
a RADIUS server.
If a RADIUS scheme defines that the username is sent without the ISP domain name, do not apply
the scheme to more than one ISP domain. Otherwise, the RADIUS server will consider two users in
different ISP domains but with the same userid as one user.
For 802.1X users using EAP authentication, the user-name-format command configured for a
RADIUS scheme does not take effect. The device does not change the usernames from clients
before forwarding them to the RADIUS server.
If the RADIUS scheme is used for roaming wireless users, specify the keep-original keyword.
Otherwise, authentication of the wireless users might fail.
Examples
# In RADIUS scheme radius1, configure the device to remove the domain name from the
usernames sent to the RADIUS servers.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] user-name-format without-domain
Related commands
display radius scheme
vpn-instance (RADIUS scheme view)
Use vpn-instance to specify an MPLS L3VPN instance for a RADIUS scheme.
114