Access device binding information area – H3C Technologies H3C Intelligent Management Center User Manual
Page 190
172
For information about configuring Apply for Service by User Group, see "
Access service list contents
•
Service Name—Name of a service, which must be unique in UAM.
•
Service Suffix—Identifies the name of the domain to be used for endpoint user authentication. For
more information, see
. The username and service suffix entered for user authentication are
closely related to the domain where the access device authenticates the user.
•
Allocate IP—IP address assigned by the service to the access user. An empty field indicates that no
IP address is assigned.
Table 18 Service suffix and other configurations
Authentication
username
Authentication domain
on the access device
Commands configured on the
access device
Service suffix in
UAM
X@Y Y
user-name-format with-domain
Y
user-name-format without-domain
None
X
[Default Domain]
(Default domain on the
access device)
user-name-format with-domain
[Default Domain]
user-name-format without-domain
None
NOTE:
The commands in
are available on HP Comware devices. The commands used on other access
devices may vary.
Transparent Authentication MAC Address Binding area
The Transparent Authentication MAC Address Binding area displays all endpoint MAC addresses that
are bound to the access user account for transparent authentication.
•
Service Name/MAC Address—Service name and MAC address that are bound to the account for
transparent portal authentication.
•
Transparent authentication—Whether the MAC address is allowed to use the account and service
for transparent portal authentication. The status can be Enabled or Disabled.
•
Bound/Disable Time—When transparent authentication is enabled, this field indicates the time
when the smart device MAC address was bound to the user and service. When transparent
authentication is disabled, this field indicates the time when transparent authentication on smart
devices was automatically or manually disabled.
Access Device Binding Information area
To pass authentication, the access user must meet all requirements of the access device bindings and
terminal bindings. Empty fields are ignored.
•
Device SN—Requires the access user connect to the access device that has the specified sequence
number.
•
Port—Requires the access user be connected through the specified port of the access device. The
value is the last portion of a device port. For example, if an access user is bound to port 3, the user
can access from port 1/0/3 or port 2/0/3.
•
Outer VLAN ID—Requires the access user's packets carry the specified outer VLAN ID.