H3C Technologies H3C S7500E Series Switches - Manual (Page 149)

8-12
To do… Use the command… Remarks
Enter interface view
interface interface-type
interface-number
—
Specify the authentication
domain for portal users on the
interface
portal domain domain-name
Required
By default, no authentication
domain is specified for portal
users.
The device selects the authentication domain for a portal user on an interface in this order: the
authentication domain specified for the interface, the authentication domain carried in the
username, and the system default authentication domain. For information about the default
authentication domain, see AAA Configuration in the Security Configuration Guide.
Specifying a NAS ID Profile for an Interface
In some networks, user access points are identified by user access VLAN. Network carriers
need to use NAS-identifier to identify user access points. With a NAS ID profile specified on an
interface, when a user logs in from the interface, the access device will check the specified
profile name to obtain the NAS ID that is bound with the access VLAN. The value of this NAS ID
will be used as that of the NAS-identifier attribute in the RADIUS packets to be sent to the
RADIUS server.
A NAS ID profile defines the binding relationship between VLANs and NAS IDs. A NAS ID-VLAN
binding is defined by the nas-id id-value bind vlan vlan-id command, which is described in
detail in AAA Commands of the Security Command Reference.
If no NAS-ID profile is specified for an interface or no matching binding is found in the specified
profile:
z If a NAS ID is configured using the portal nas-id command, the interface will use the
configured NAS ID as that of the interface.
z If the interface does not support NAS ID configuration or has no NAS ID configured, it will
use the device name as the interface NAS ID.
Follow these steps to configure a NAS ID profile for an interface:
To do… Use the command… Remarks
Enter system view system-view —