Configuring The Attributes Of A Local User - H3C S5600 Series Operation Manual

Operation Manual – AAA
H3C S5600 Series Ethernet Switches
Enter system view
Create an ISP domain
and enter its view
Set the VLAN
assignment mode
Create a VLAN and enter
its view
Set a VLAN name for
VLAN assignment
Caution:
In string mode, if the VLAN ID assigned by the RADIUS server is a character string
containing only digits (for example, 1024), the switch first regards it as an integer
VLAN ID: the switch transforms the string to an integer value and judges if the value
is in the valid VLAN ID range; if it is, the switch adds the authenticated port to the
VLAN with the integer value as the VLAN ID (VLAN 1024, for example).
To implement dynamic VLAN assignment on a port where both MSTP and 802.1x
are enabled, you must set the MSTP port to an edge port.

2.1.4 Configuring the Attributes of a Local User

When local scheme is chosen as the AAA scheme, you should create local users on
the switch and configure the relevant attributes.
The local users are users set on the switch, with each user uniquely identified by a
username. To make a user who is requesting network service pass local authentication,
you should add an entry in the local user database on the switch for the user.
Follow these steps to configure the attributes of a local user:
To do... Use the command...
system-view
domain isp-name
vlan-assignment-mode
{ integer | string }
vlan vlan-id
name string
—
—
Optional
By default, the VLAN
assignment mode is integer.
—
This operation is required if
the VLAN assignment mode
is set to string.
2-8
Chapter 2 AAA Configuration
Remarks