H3C S7500E Series Command Manual page 986

Command Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Examples
# Set the HWTACACS server response timeout timer to 30 seconds for HWTACACS
scheme hwt1.
<Sysname> system-view
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] timer response-timeout 30
1.3.21 user-name-format
Syntax
user-name-format { with-domain | without-domain }
View
HWTACACS scheme view
Parameters
with-domain: Includes the ISP domain name in the username sent to the HWTACACS
server.
without-domain: Excludes the ISP domain name from the username sent to the
HWTACACS server.
Description
Use the user-name-format command to specify the format of the username to be sent
to a HWTACACS server.
By default, the ISP domain name is included in the username.
Note that:
A username is generally in the format of userid@isp-name, of which isp-name is
used by the device to determine the ISP domain to which a user belongs. Some
earlier HWTACACS servers, however, cannot recognize a username including
an ISP domain name. Before sending a username including a domain name to
such a HWTACACS server, the device must remove the domain name. This
command is thus provided for you to decide whether to include a domain name in
a username to be sent to a HWTACACS server.
If a HWTACACS scheme defines that the username is sent without the ISP
domain name, do not apply the HWTACACS scheme to more than one ISP
domain, thus avoiding the confused situation where the HWTACACS server
regards two users in different ISP domains but with the same userid as one.
Related commands: hwtacacs scheme.
Chapter 1 AAA/RADIUS/HWTACACS
1-77
Configuration Commands