Specifying A Nas Id Profile For An Interface - 3Com S7906E Configuration Manual

To do...
Enter system view
Enter interface view
Specify an authentication
domain for the interface
The device selects the authentication domain for a portal user on an interface in this order: the ISP
domain specified for the interface, the ISP domain carried in the username, and the system default ISP
domain. For descriptions on the default ISP domain, refer to AAA Configuration in the Security Volume.

Specifying a NAS ID Profile for an Interface

In some networks, user access points are identified by user access VLAN. Network carriers need to use
NAS-identifier to identify user access points. With a NAS ID profile specified on an interface, when a
user logs in from the interface, the access device will check the specified profile name to obtain the NAS
ID that is bound with the access VLAN. The value of this NAS ID will be used as that of the
NAS-identifier attribute in the RADIUS packets to be sent to the RADIUS server.
A NAS ID profile defines the binding relationship between VLANs and NAS IDs. A NAS ID-VLAN
binding is defined by the nas-id id-value bind vlan vlan-id command, which is described in detail in
AAA Commands of the Security Volume.
If no NAS-ID profile is specified for an interface or no matching binding is found in the specified profile:
If a NAS ID is configured using the portal nas-id command, the interface will use the configured
NAS ID as that of the interface.
If the interface does not support NAS ID configuration or has no NAS ID configured, it will use the
device name as the interface NAS ID.
Follow these steps to configure a NAS ID profile for an interface:
To do...
Enter system view
Create a NAS ID profile and
enter NAS ID profile view
Bind a NAS ID with a VLAN
Return to system view
Use the command...
system-view
interface interface-type
interface-number
portal domain domain-name
Use the command...
system-view
aaa nas-id profile
profile-name
nas-id nas-identifier bind vlan
vlan-id
quit
1-11
Remarks
—
—
Required
By default, no authentication
domain is specified for an
interface.
Remarks
—
Required
Refer to AAA Commands in the
Security Volume for details
about the command.
Required
Refer to AAA Commands in the
Security Volume for details
about the command.
—