Exclude-Attribute (Portal Authentication Server View) - H3C MSR Series Command Reference Manual

[Sysname-portal-mac-trigger-server-123] exclude-attribute 10

exclude-attribute (portal authentication server view)

Use exclude-attribute to exclude an attribute from portal protocol packets.
Use undo exclude-attribute to not exclude an attribute from portal protocol packets.
Syntax
exclude-attribute number { ack-auth | ack-logout | ntf-logout }
undo exclude-attribute number { ack-auth | ack-logout | ntf-logout }
Default
No attributes are excluded from portal protocol packets.
Views
Portal authentication server view
Predefined user roles
network-admin
Parameters
number: Specifies an attribute by its number in the range of 1 to 255.
ack-auth: Excludes the attribute from ACK_AUTH packets.
ack-logout: Excludes the attribute from ACK_LOGOUT packets.
ntf-logout: Excludes the attribute from NTF_LOGOUT packets.
Usage guidelines
Support of the portal authentication server for portal protocol attributes varies by the server type. If
the device sends the portal authentication server a packet that contains an attribute unsupported by
the server, the device and the server cannot communicate.
To address this issue, you can configure this command to exclude the unsupported attributes from
specific portal protocol packets sent to the portal authentication server.
You can specify multiple excluded attributes. For an excluded attribute, you can specify multiple
types of portal protocol packets (ack-auth, ntf-logout, and ack-logout).
Table 42 describes all attributes of the portal protocol.
Table 42 Portal attributes
Name
UserName
PassWord
Challenge
ChapPassWord
TextInfo
Number Description
1 Name of the user to be authenticated.
2 User password in plaintext form.
3 Random challenge for CHAP authentication.
4 CHAP password encrypted by MD5.
The device uses this attribute to transparently transport prompt
information of a RADIUS server or packet error information to the portal
authentication server.
5
The attribute value can be any string excluding the end character '\0'.
This attribute can exist in any packet from the device to the portal
server. A packet can contain multiple TextInfo attributes. As a best
practice, carry only one TextInfo attribute in a packet.
301