Configuring Self-Service Server Url; Creating/Deleting A Local User - H3C S9500 Series Operation Manual

Operation Manual – Security
H3C S9500 Series Routing Switches
By default, the Local scheme is adopted, an ISP domain is in Active state once it is
created, no limit is set to the amount of supplicants, accounting optional is disabled,
idle-cut is disabled, and no IP address pool is defined.

2.2.3 Configuring Self-Service Server URL

The self-service-url enable command must be incorporated with a RADIUS server
(such as a CAMS server) that supports self-service. Self-service means that users can
manage their accounts and card numbers by themselves. And a server with the
self-service software is called a self-service server.
Once this function is enabled on the switch, users can locate the self-service server
through the following operations:
Select "Change user password" on the 802.1x client.
After the client opens the default explorer (IE or NetScape), locate the specified
URL page used to change the user password on the self-service server.
Change user password on this page.
Perform the following configuration in ISP domain view.
Table 2-4 Configure the self-service server URL
Configure self-service server URL and configure the
URL address used to change the user password on the
self-service server
Remove the configuration of self-service server URL
By default, self-service server URL is not configured on the switch.
Note that, if "?" is contained in the URL, you must replace it with "|" when inputting the
URL in the command line.
The "Change user password" option is available only when the user passes the
authentication; otherwise, this option is in grey and unavailable.

2.2.4 Creating/Deleting a Local User

A local user is a group of users set on NAS. The username is the unique identifier of a
user. A supplicant requesting network service may use local authentication only if its
corresponding local user has been added onto NAS.
Perform the following configuration in system view.
Operation
2-9
Chapter 2 AAA and RADIUS/HWTACACS
Protocol Configuration
Command
self-service-url
url-string
self-service-url disable
enable