beautypg.com

Configuring a nas id-vlan binding, Displaying and maintaining aaa – H3C Technologies H3C S7500E Series Switches User Manual

Page 63

background image

2-34

Configuring a NAS ID-VLAN Binding

In some application scenarios, it is required to identify the access locations of users. In this case,

configure NAS ID-VLAN bindings on the access device, so that when a user gets online, the access

device can obtain the NAS ID by the access VLAN of the user and then send the NAS ID to the

RADIUS server through the NAS-identifier attribute. For more information about this, see Portal

Configuration in the Security Configuration Guide.

Follow these steps to configure a NAS ID-VLAN binding:

To do…

Use the command…

Remarks

Enter system view

system-view

Create a NAS ID profile and enter

NAS ID profile view

aaa nas-id profile profile-name

Required

Configure a NAS ID-VLAN binding

nas-id nas-identifier bind vlan

vlan-id

Required

By default, no NAS ID-VLAN

binding exists.

Displaying and Maintaining AAA

To do…

Use the command…

Remarks

Display the configuration
information of a specified ISP
domain or all ISP domains

display domain [ isp-name ]

Available in any view

Display information about

specified or all user connections

(on a distributed device)

display connection [ access-type { dot1x |

mac-authentication | portal } | domain

isp-name | interface interface-type

interface-number | ip ip-address | mac

mac-address | ucibindex ucib-index |

user-name user-name | vlan vlan-id ] [ slot

slot-number ]

Available in any view

Display information about

specified or all user connections

(on a distributed IRF member

device)

display connection [ access-type { dot1x |

mac-authentication | portal } | domain

isp-name | interface interface-type

interface-number | ip ip-address | mac

mac-address | ucibindex ucib-index |

user-name user-name | vlan vlan-id ] [ chassis

chassis-number slot slot-number ]

Available in any view