H3C Technologies H3C S7500E Series Switches User Manual
Page 43
2-14
To do…
Use the command…
Remarks
Specify the unit for data flows or
packets to be sent to a RADIUS
server
data-flow-format { data { byte |
giga-byte | kilo-byte |
mega-byte } | packet
{ giga-packet | kilo-packet |
mega-packet | one-packet } }*
Optional
byte for data flows and
one-packet for data packets by
default.
z
Some earlier RADIUS servers cannot recognize usernames that contain an ISP domain name. In
this case, the device must remove the domain name before sending a username including a
domain name. You can configure the user-name-format without-domain command on the
device for this purpose.
z
If a RADIUS scheme defines that the username is sent without the ISP domain name, do not
apply the RADIUS scheme to more than one ISP domain. Otherwise, users using the same
username but in different ISP domains will be considered the same user.
z
For level switching authentication, the user-name-format keep-original and user-name-format
without-domain commands produce the same results, that is, usernames sent to the RADIUS
server carry no ISP domain name.
z
The unit of data flows sent to the RADIUS server must be consistent with the traffic statistics unit
of the RADIUS server. Otherwise, accounting cannot be performed correctly.
Specifying the source IP address for RADIUS packets to be sent
You can specify an IP address as the source address for RADIUS packets to be sent on a NAS, so
that when the physical outbound interface fails, response packets from the RADIUS server can still
arrive at the NAS. Usually, specify an IP address of the device that can communicate with the server
as the source IP address for RADIUS packets.
You can specify the source IP address for RADIUS packets to be sent in RADIUS scheme view for a
specific RADIUS scheme, or in system view for all RADIUS schemes.
Follow these steps to specify a source IP address for all RADIUS schemes:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Specify the source IP address
for RADIUS packets to be sent
radius nas-ip { ip-address |
ipv6 ipv6-address }
Required
By default, the IP address of the outbound
interface is used as the source IP address.
Follow these steps to specify a source IP address for a specific RADIUS scheme: