HPE FlexNetwork 10500 Series Security Configuration Manual page 55

An Access-Accept packet received for a user must contain the matching attribute value. Otherwise,
the user cannot log in to the device.
Use the loose check method only when the server does not issue Login-Service attribute values 50,
51, and 52 for SSH, FTP, and terminal users.
To configure the Login-Service attribute check method for SSH, FTP, and terminal users:
Step
1. Enter system view.
2. Enter RADIUS scheme view.
3. Configure the Login-Service
attribute check method for
SSH, FTP, and terminal
users.
Configuring the MAC address format for RADIUS attribute 31
RADIUS servers of different types might have different requirements for the MAC address format in
RADIUS attribute 31. Configure the MAC address format for RADIUS attribute 31 to meet the
requirements of the RADIUS servers.
To configure the MAC address format for RADIUS attribute 31:
Step
1. Enter system view.
2. Enter RADIUS scheme view.
3. Configure the MAC address
format for RADIUS attribute
31.
Setting the data measurement unit for the Remanent_Volume attribute
The RADIUS server uses the Remanent_Volume attribute in authentication or real-time accounting
responses to notify the device of the current amount of data available for online users.
Perform this task to set the data measurement unit for the Remanent_Volume attribute. Make sure
the configured measurement unit is the same as the user data measurement unit on the RADIUS
server.
To set the data measurement unit for the Remanent_Volume attribute:
Step
1. Enter system view.
2. Enter RADIUS scheme
view.
3. Set the data measurement
unit for the
Remanent_Volume
attribute.
Command
system-view
radius scheme
radius-scheme-name
attribute 15 check-mode { loose |
strict }
Command
system-view
radius scheme
radius-scheme-name
attribute 31 mac-format section
{ six | three } separator
separator-character { lowercase |
uppercase }
Command
system-view
radius scheme
radius-scheme-name
attribute remanent-volume unit
{ byte | giga-byte | kilo-byte |
mega-byte }
38
Remarks
N/A
N/A
The default check method is
strict.
Remarks
N/A
N/A
By default, a MAC address is in
the format of
HH-HH-HH-HH-HH-HH. The
MAC address is separated by
hyphen (-) into six sections with
letters in upper case.
Remarks
N/A
N/A
By default, the data measurement
unit is kilobyte.