HP 6125G Configuration Manual page 34

Security configuration guide
Hide thumbs Also See for 6125G:
Table of Contents

Advertisement

For level switching authentication, the user-name-format keep-original and user-name-format
without-domain commands produce the same results. They make sure usernames sent to the
RADIUS server carry no ISP domain name.
To set the username format and the traffic statistics units for a RADIUS scheme:
Step
1.
Enter system view.
2.
Enter RADIUS scheme view.
3.
Set the format for usernames
sent to the RADIUS servers.
4.
Specify the unit for data flows
or packets sent to the RADIUS
servers.
Setting the supported RADIUS server type
The supported RADIUS server type determines the type of the RADIUS protocol that the switch uses to
communicate with the RADIUS server. It can be standard or extended:
Standard—Uses the standard RADIUS protocol, compliant to RFC 2865 and RFC 2866 or later.
Extended—Uses the proprietary RADIUS protocol of HP.
When the RADIUS server runs on IMC, you must set the RADIUS server type to extended. When the
RADIUS server runs third-party RADIUS server software, either RADIUS server type applies.
To set the RADIUS server type:
Step
1.
Enter system view.
2.
Enter RADIUS scheme view.
3.
Set the RADIUS server type.
NOTE:
Changing the RADIUS server type restores the unit for data flows and that for packets that are sent to the
RADIUS server to the defaults.
Setting the maximum number of RADIUS request transmission attempts
Because RADIUS uses UDP packets to transfer data, the communication process is not reliable. RADIUS
uses a retransmission mechanism to improve the reliability. If a NAS sends a RADIUS request to a
RADIUS server but receives no response after the response timeout timer (defined by the timer
response-timeout command) expires, it retransmits the request. If the number of transmission attempts
exceeds the specified limit but it still receives no response, it tries to communicate with other RADIUS
Command
system-view
radius scheme
radius-scheme-name
user-name-format { keep-original
| with-domain | without-domain }
data-flow-format { data { byte |
giga-byte | kilo-byte |
mega-byte } | packet
{ giga-packet | kilo-packet |
mega-packet | one-packet } }*
Command
system-view
radius scheme
radius-scheme-name
server-type { extended |
standard }
24
Remarks
N/A
N/A
Optional.
By default, the ISP domain name is
included in a username.
Optional.
The default unit is byte for data
flows and is one-packet for data
packets.
Remarks
N/A
N/A
Optional.
The default RADIUS server type is
standard.

Advertisement

Table of Contents
loading

This manual is also suitable for:

6125 blade switch series

Table of Contents