3Com 8807 Configuration Manual page 241

Configuring Self-Service
Server URL
Table 199 Configure relevant attributes of an ISP domain
Operation
Configure the AAA scheme used by an ISP
domain
Restore the default AAA scheme used by an
ISP domain
Configure the RADIUS scheme used by an ISP
domain
Delete the specified RADIUS scheme
Set the state of ISP domain
Set a limit to the amount of supplicants
Restore the limit to the default setting
Enable accounting to be optional
Disable accounting to be optional
Set the Idle-cut
Define an address pool to assign IP addresses
to users
Delete the specified address pool
Both the radius-scheme and scheme radius-scheme commands can be used to
specify the RADIUS scheme for an ISP domain with the same effect, and the
system adopts the last configuration.
By default, the Local scheme is adopted, an ISP domain is in Active state once it is
created, no limit is set to the amount of supplicants, accounting optional is
disabled, idle-cut is disabled, and no IP address pool is defined.
The self-service-url enable command must be incorporated with a RADIUS
server that supports self-service, such as comprehensive access management
server (CAMS). Self-service means that users can manage their accounts and card
numbers by themselves. And a server with the self-service software is called a
self-service server.
Once this function is enabled on the switch, users can locate the self-service server
through the following operations:
Select "Change user password" on the 802.1x client.
■
After the client opens the default explorer (IE or NetScape), locate the specified
■
URL page used to change the user password on the self-service server.
Change user password on this page.
■
Perform the following configuration in ISP domain view.
AAA Configuration
Command
scheme { radius-scheme
radius-scheme-name [ local ] |
hwtacacs-scheme hwtacacs-scheme-name [
local ] | local | none }
undo scheme { radius-scheme |
hwtacacs-scheme | none }
radius-scheme radius-scheme-name
undo radius scheme radius-server-name
state { primary | secondary } { accounting |
authentication } { block | active }
access-limit { disable | enable
max-user-number }
undo access-limit
accounting optional
undo accounting optional
idle-cut { disable | enable minute flow }
ip pool pool-number low-ip-address [
high-ip-address ]
undo ip pool pool-number
241