Configuring Attributes For Radius Packets; Specifying A Format For The Nas-Port-Id Attribute; Applying A Nas-Id Profile To An Interface - H3C SR8800-F Configuration Manual

Step
2. Specify the device ID.

Configuring attributes for RADIUS packets

Specifying a format for the NAS-Port-Id attribute

RADIUS servers from different vendors might require different formats of the NAS-Port-Id attribute in
the RADIUS packets. You can specify the NAS-Port-Id attribute format as required.
The device supports predefined format (format 1, 2, 3, and 4) and the custom format. For more
information about the formats, see the portal nas-port-id format command in User Access
Command Reference.
To specify a format for the NAS-Port-Id attribute:
Step
1. Enter system view.
2. Specify the format for the
NAS-Port-Id attribute.

Applying a NAS-ID profile to an interface

By default, the device sends its device name in the NAS-Identifier attribute of all RADIUS requests.
A NAS-ID profile enables you to send different NAS-Identifier attribute strings in RADIUS requests
from different VLANs. The strings can be organization names, service names, or any user
categorization criteria, depending on the administrative requirements.
For example, map the NAS-ID companyA to all VLANs of company A. The device will send
companyA in the NAS-Identifier attribute for the RADIUS server to identify requests from any
Company A users.
You can apply a NAS-ID profile to a portal-enabled interface. If no NAS-ID profile is specified on the
interface or no matching NAS-ID is found in the specified profile, the device uses the device name as
the interface NAS-ID.
To apply a NAS-ID profile to an interface:
Step
1. Enter system view.
2. Create a NAS-ID profile and
enter NAS-ID profile view.
3. Configure a NAS ID and
VLAN binding in the profile.
Command
portal device-id device-id
Command
system-view
portal nas-port-id format { 1 | 2 |
3 | 4 | custom { c-vid [ delimiter ] |
interface-type [ delimiter ] | port
[ delimiter ] | slot [ delimiter ] |
subslot [ delimiter ] | s-vid
[ delimiter ] | string string
[ delimiter ] } * }
Command
system-view
aaa nas-id profile profile-name
nas-id nas-identifier bind { vlan
vlan-id | { c-vid vlan-id | s-vid
vlan-id } * }
324
Remarks
By default, a device is not
configured with a device ID.
Remarks
N/A
By default, the format for the
NAS-Port-Id attribute is format 2.
Remarks
N/A
For more information about this
command, see User Access
Command Reference.
For more information about this
command, see User Access
Command Reference.