Private-Group-Id Mode Standard - Huawei Quidway S8500 Series Command Manual

Command Manual – Security
Quidway S8500 Series Routing Switches
Example
# With huawei163.net as the current ISP domain, specify to adopt the RADIUS scheme
named huawei.
[Quidway-isp-huawei163.net] scheme radius-scheme huawei
# Specify the ISP domain named huawei to adopt the Scheme named rd, with Local
authentication as the secondary authentication Scheme.
[Quidway-isp-huawei] scheme radius-scheme rd local
# Specify the ISP domain named huawei to adopt hwtacacs-scheme hwtac Scheme,
with Local authentication as the secondary authentication Scheme.
[Quidway-isp-huawei] scheme hwtacacs-scheme hwtac local

2.1.17 private-group-id mode standard

Syntax
private-group-id mode standard
undo private-group-id mode standard
View
System view
Parameter
private-group-id:
private-group-id.
mode: Specifies the way to represent the RADIUS attribute private-group-id.
standard: Specify to code the RADIUS attribute private-group-id according to RFC
2868.
Description
Use the private-group-id mode standard command to configure VLAN delivering
mode. A VLAN ID can be a string.
By default, a switch does not support a VLAN ID delivered by a RADIUS server to be of
string type.
Dynamic VLAN delivering enables an Ethernet switch to monitor network resources
available to users by adding the ports to which the authenticated users connect to
different VLANS according to the attributes delivered by RADIUS servers. To work with
Guest VLAN, ports are usually configured to perform port-based authentications. (If
you configure a port to perform MAC address-based authentications, it can have only
one user connected.)
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Specifies the way
Huawei Technologies Proprietary
2-17
Configuration Commands
to represent the RADIUS attribute