Disconnecting A User By Force; Configuring Dynamic Vlan With Radius Server - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches
Cancel the service type of
the specified
S3526,
S3526 FS)
Configure the attributes of
lan-access users
Remove
defined for the lan-access
users

3.2.5 Disconnecting a User by Force

Sometimes it is necessary to disconnect a user or a category of users by force. The
system provides the following command to serve for this purpose.
Perform the following configurations in system view.
Table 3-6 Disconnecting a user by force
Operation
Disconnect
user by force
By default, no online user will be disconnected by force.

3.2.6 Configuring Dynamic VLAN with RADIUS Server

Note:
Among S3500 series ethernet switches, S3552G, S3552P, S3528G, S3528P, S3526E,
S3526E FM, S3526E FS and S3526C support this function, and S3526, S3526 FM and
S3526 FS don't.
Based on the delivery attribute value of the RADIUS server, the switch adds the ports of
the users who have passed the authentication to different VLANs, for purpose of
controlling the network resources that the users can access. In the practical
applications, the ports are set in port-based mode in order to work together with Guest
Operation
user (For
S3526 FM and
the attributes
cut connection { all | access-type { dot1x | portal } | domain
a domain-name | interface portnum | ip ip-address | mac
mac-address | radius-scheme radius-scheme-name | vlan
vlanid | ucibindex ucib-index | user-name user-name }
Huawei Technologies Proprietary
Chapter 3 AAA and RADIUS Protocol Configuration
Command
undo service-type { ftp [ ftp-directory ] |
lan-access | telnet [ level level ] }
attribute { ip ip-address | mac mac-address |
idle-cut second | access-limit max-user-number |
vlan vlanid | location { nas-ip ip-address port
portnum | port portnum }*
undo attribute { ip | mac | idle-cut | access-limit |
vlan | location }*
Command
3-7