H3C Technologies H3C S7500E Series Switches User Manual

Page 43

Advertising
background image

2-14

To do…

Use the command…

Remarks

Specify the unit for data flows or

packets to be sent to a RADIUS

server

data-flow-format { data { byte |

giga-byte | kilo-byte |

mega-byte } | packet

{ giga-packet | kilo-packet |

mega-packet | one-packet } }*

Optional

byte for data flows and

one-packet for data packets by

default.

z

Some earlier RADIUS servers cannot recognize usernames that contain an ISP domain name. In

this case, the device must remove the domain name before sending a username including a

domain name. You can configure the user-name-format without-domain command on the

device for this purpose.

z

If a RADIUS scheme defines that the username is sent without the ISP domain name, do not

apply the RADIUS scheme to more than one ISP domain. Otherwise, users using the same

username but in different ISP domains will be considered the same user.

z

For level switching authentication, the user-name-format keep-original and user-name-format

without-domain commands produce the same results, that is, usernames sent to the RADIUS

server carry no ISP domain name.

z

The unit of data flows sent to the RADIUS server must be consistent with the traffic statistics unit

of the RADIUS server. Otherwise, accounting cannot be performed correctly.

Specifying the source IP address for RADIUS packets to be sent

You can specify an IP address as the source address for RADIUS packets to be sent on a NAS, so

that when the physical outbound interface fails, response packets from the RADIUS server can still

arrive at the NAS. Usually, specify an IP address of the device that can communicate with the server

as the source IP address for RADIUS packets.

You can specify the source IP address for RADIUS packets to be sent in RADIUS scheme view for a

specific RADIUS scheme, or in system view for all RADIUS schemes.

Follow these steps to specify a source IP address for all RADIUS schemes:

To do…

Use the command…

Remarks

Enter system view

system-view

Specify the source IP address

for RADIUS packets to be sent

radius nas-ip { ip-address |

ipv6 ipv6-address }

Required

By default, the IP address of the outbound

interface is used as the source IP address.

Follow these steps to specify a source IP address for a specific RADIUS scheme:

Advertising