Specifying The Device Id Used In Stateful Failover Mode (Available Only On The S5500-Ei Series); Configuring A Switch As A Radius Server; Radius Server Functions Configuration Task List; Configuring A Radius User - H3C S5500-EI Series Security Configuration Manual

Specifying the device ID used in stateful failover
mode (available only on the S5500-EI series)
Two switches working in stateful failover mode for portal services are uniquely identified by their device
IDs. A device ID can only be 1 or 2. For more information about the stateful failover mode for portal
services, see
Follow these guidelines when you specify the device ID used in stateful failover mode:
• Configuring or changing the device ID of a switch logs out all online users of the switch.
H3C recommends to save the configuration and reboot the switch after configuring or changing the
•
device ID.
The device ID is the symbol for stateful failover mode. Do not configure any device ID for a switch
•
working in stand-alone mode.
To specify the device ID used in stateful failover mode:
Step
1. Enter system view.
2. Specify the device ID used
in stateful failover mode.

Configuring a switch as a RADIUS server

RADIUS server functions configuration task list

Task

Configuring a RADIUS user

Specifying a RADIUS client
Configuring a RADIUS user
This task is to create a RADIUS user and configure a set of attributes for the user on a switch that serves
as the RADIUS server. The user attributes include the password, authorization attribute, expiration time,
and user description. After completing this task, the specified RADIUS user can use the username and
password for RADIUS authentication on the switch.
You can use the authorization-attribute command to specify an authorization ACL and authorized VLAN,
which is assigned by the RADIUS server to the RADIUS client (the NAS) after the RADIUS user passes
authentication. The NAS then uses the assigned ACL and VLAN to control user access. If the assigned
ACL does not exist on the NAS, ACL assignment fails and the NAS forcibly logs out the RADIUS user. If
the assigned VLAN does not exist on the NAS, the NAS creates the VLAN and adds the RADIUS user or
the access port to the VLAN.
To configure a RADIUS user:
"Configuring portal authentication."
Command
system-view
nas device-id device-id
Remarks
N/A
By default, a switch works in standalone
mode and has no device ID.
Remarks
Required
Required
48