[Switch-radius-rad] user-name-format with-domain
# Configure the AAA methods for the domain.
[Switch] domain bbb
[Switch-isp-bbb] authentication login radius-scheme rad
[Switch-isp-bbb] authorization login radius-scheme rad
[Switch-isp-bbb] accounting login radius-scheme rad
When using SSH to log in, a user enters a username in the form userid@bbb for authentication using
Verify the configuration
After the above configuration, the SSH user should be able to use the configured account to access the
user interface of the switch. The commands that the user can access depend on the settings for EXEC
users on the iMC server.
Symptom 1: User authentication/authorization always fails.
A communication failure exists between the NAS and the RADIUS server.
The username is not in the format of userid@isp-name or no default ISP domain is specified for the
The user is not configured on the RADIUS server.
The password of the user is incorrect.
The RADIUS server and the NAS are configured with different shared key.
The NAS and the RADIUS server can ping each other.
The username is in the userid@isp-name format and a default ISP domain is specified on the NAS.
The user is configured on the RADIUS server.
The correct password is entered.
The same shared key is configured on both the RADIUS server and the NAS.
Symptom 2: RADIUS packets cannot reach the RADIUS server.
The communication link between the NAS and the RADIUS server is down (at the physical layer
and data link layer).
The NAS is not configured with the IP address of the RADIUS server.
The UDP ports for authentication/authorization and accounting are not correct.
The port numbers of the RADIUS server for authentication, authorization and accounting are being
used by other applications.