Setting The Unit Of Data Flow That Transmitted To The Radius Server; Configuring The Local Radius Authentication Server - 3Com 400 Family Configuration Manual

206 C 11: 802.1X C
HAPTER
Setting the Unit of Data
Flow that Transmitted to
the RADIUS Server
Configuring the Local
RADIUS Authentication
Server
ONFIGURATION
Table 224 Setting the Username Format Transmitted to the RADIUS Server
Operation
Set Username Format Transmitted to
RADIUS Server
If a RADIUS scheme is configured not to allow usernames including ISP domain
names, the RADIUS scheme shall not be simultaneously used in more than one ISP
domain. Otherwise, the RADIUS server will regard two users in different ISP
domains as the same user by mistake, if they have the same username (excluding
their respective domain names.)
By default, the RADIUS scheme acknowledges that the username sent to it
includes the ISP domain name.
The following command defines the unit of the data flow sent to RADIUS server.
Perform the following configurations in RADIUS Scheme View
Table 225 Setting the Unit of Data Flow Transmitted to the RADIUS Server
Operation
Set the unit of data flow
transmitted to RADIUS
server
Restore the unit to the
default setting
By default, the default data unit is byte and the default data packet unit is one
packet.
RADIUS service adopts authentication/authorization/accounting servers to manage
users. Local authentication/authorization/accounting service is also used in these
products and it is called local RADIUS authentication server function.
Perform the following commands in System View to create/delete local RADIUS
authentication server.
Table 226 Creating/Deleting the Local RADIUS Authentication Server
Operation
Create the local RADIUS authentication
server
Delete the local RADIUS authentication
server
By default, the IP address of the local RADIUS authentication server is 127.0.0.1
and the password is 3com.
1) When using local RADIUS server function of 3com, remember the number of
the UDP port used for authentication is 1645 and that for accounting is 1646.
2) The password configured by this command must be the same as that of the
RADIUS authentication/authorization packet configured by the command
in RADIUS Scheme View.
authentication
Command
user-name-format { with-domain |
without-domain }
Command
data-flow-format data { byte | giga-byte |
kilo-byte | mega-byte } packet { giga-byte |
kilo-byte | mega-byte | one-packet }
undo data-flow-format
Command
local-server nas-ip ip_address key
password
undo local-server nas-ip ip_address
key