Configuring The Attributes Of A Local User - Huawei Quidway S3900 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Table 1-9 Configure dynamic VLAN assignment
Operation
Enter
view
Create
domain and enter
its view
Set the
assignment mode
Create a VLAN
and enter its view
Set a VLAN name
for
assignment
Caution:
In string mode, if the VLAN ID assigned by the RADIUS server is a character string
containing only digits (for example, 1024), the switch first regards it as an integer
VLAN ID: the switch transforms the string to an integer value and judges if the value
is in the valid VLAN ID range; if it is, the switch adds the authenticated port to the
VLAN with the integer value as the VLAN ID (VLAN 1024, for example).
To implement dynamic VLAN assignment on a port where both MSTP and 802.1x
are enabled, you must set the MSTP port to an edge port.

1.3.6 Configuring the Attributes of a Local User

When local scheme is chosen as the AAA scheme, you should create local users on
the switch and configure the relevant attributes.
The local users are users set on the switch, with each user uniquely identified by a user
name. To make a user who is requesting network service pass through the local
authentication, you should add an entry in the local user database on the switch for the
user.
Table 1-10 Configure the attributes of a local user
Enter system view
Command
system
system-view
an ISP
domain isp-name
VLAN
vlan-assignment-mode
{ integer | string }
vlan vlan_id
VLAN name string
Operation
system-view
Huawei Technologies Proprietary
Chapter 1 AAA & RADIUS & HWTACACS
—
—
Optional
By
assignment mode is integer.
—
This operation is required if the
VLAN assignment mode is set to
string.
Command
—
1-20
Configuration
Description
default, the VLAN
Description