3Com 7757 Configuration Manual page 523

c
Configuring the
Attributes of a Local
User
Table 404 Configure dynamic VLAN assignment
Operation Command
Create an ISP domain domain isp-name
and enter its view
Set the VLAN vlan-assignment-mode { inte
assignment mode ger | string }
Create a VLAN and vlan vlan-id
enter its view
Set a VLAN name for name string
VLAN assignment
CAUTION:
In string mode, if the VLAN ID assigned by the RADIUS server is a character
■
string containing only digits (for example, 1024), the switch first regards it as
an integer VLAN ID: the switch transforms the string to an integer value and
judges if the value is in the valid VLAN ID range; if it is, the switch adds the
authenticated port to the VLAN with the integer value as the VLAN ID (VLAN
1024, for example).
To implement dynamic VLAN assignment on a port where both MSTP and
■
802.1x are enabled, you must set the MSTP port to an edge port.
When local scheme is chosen as the AAA scheme, you should create local users
on the switch and configure the relevant attributes.
The local users are users set on the switch, with each user uniquely identified by a
user name. To make a user who is requesting network service pass through the
local authentication, you should add an entry in the local user database on the
switch for the user.
Table 405 Configure the attributes of a local user
Operation
Enter system view
Add a local user and enter
local user view
Set a password for the
specified user
Set the password display mode
of all local users
Set the state of the specified
user
Description
-
Optional
By default, the VLAN assignment
mode is integer.
-
This operation is required if the
VLAN assignment mode is set to
string.
Command
system-view
local-user user-name
password { simple |
cipher } password
local-user
password-display-mode
{ cipher-force | auto }
state { active | block }
AAA Configuration
Description
-
Required
By default, there is no local user
in the system.
Optional
Optional
By default, the password display
mode of all access users is auto,
indicating the passwords of
access users are displayed in the
modes set with the password
command.
Optional
By default, the local users are in
the active state once they are
created, that is, they are allowed
to request network services.
523