H3C Technologies H3C SecPath F1000-E - Manual (Page 12)

11
NOTE:
The device selects the authentication domain for a portal user on an interface in this order: the ISP domain
specified for the interface, the ISP domain carried in the username, and the system default ISP domain. For
more information about the default ISP domain, see RADIUS Configuration in the Firewall Web
Configuration Manual.
Configuring RADIUS Related Attributes
Specifying a NAS ID for an Interface
If an interface is configured with a NAS ID, when a portal user logs on from the interface, the device uses
the configured NAS ID as the NAS-identifier in the RADIUS request to be sent to the RADIUS server.
Follow these steps to specify a NAS ID for an interface:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Specify a NAS ID for the interface portal nas-id nas-identifier
Required
By default, the device name
configured by the sysname
command is used as the NAS ID.
For information about the
sysname command, see Basic
System Configuration Commands
in the System Volume.
Specifying NAS-Port-Type for an Interface
NAS-Port-Type is a standard RADIUS attribute for indicating the type of a user access port. With this
attribute specified on an interface, when a portal user logs on from the interface, the device uses the
specified NAS-Port-Type value as that in the RADIUS request to be sent to the RADIUS server. If
NAS-Port-Type is not specified, the device uses the access port type obtained.
If there are multiple network devices between the Broadband Access Server (BAS, the portal
authentication access device) and a portal client, the BAS may not be able to obtain the correct access
port information of a user. For example, for a wireless client using portal authentication, the access port
type obtained by the BAS may be the type of the wired port that authenticates the user. Therefore, to
ensure that the BAS delivers the right access port information to the RADIUS server, you need to specify
the NAS-Port-Type according to the practical access environment.
Follow these steps to specify the NAS-Port-Type value for an interface:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—