43
Create a RADIUS user and
enter RADIUS server user view
radius-server user user-name
Required
No RADIUS user exists by default.
Configure a password for the
RADIUS user
password [ cipher | simple ]
password
Optional
By default, no password is specified.
Configure the authorization
attribute for the RADIUS user
authorization-attribute { acl
acl-number | vlan vlan-id } *
Optional
Not configured by default.
Configure the expiration time
for the RADIUS user
Optional
By default, no expiration time is
configured, and the system does not
check users’ expiration time.
Configure a description for the
RADIUS user
Optional
Not configured by default.
NOTE:
You can use the authorization-attribute command to specify an authorization ACL and authorized
VLAN, which will be assigned by the RADIUS server to the RADIUS client (the NAS) after the RADIUS
user passes authentication. The NAS then uses the assigned ACL and VLAN to control user access. If
the assigned ACL does not exist on the NAS, ACL assignment will fail and the NAS will log the RADIUS
user out forcibly. If the assigned VLAN does not exist on the NAS, the NAS will create the VLAN and
add the RADIUS user or the access port to the VLAN.
Specifying a RADIUS client
This task is to specify the IP address of a client to be managed by the RADIUS server and configure the
shared key. The RADIUS server processes only the RADIUS packets sent from the specified clients.
Follow these steps to specify a RADIUS client
radius-server client-ip ip-address [ key string ]
Required
No RADIUS client is
specified by default.
NOTE:
ï‚· The IP address of a RADIUS client specified on the RADIUS server must be consistent with the source IP address
of RADIUS packets configured on the RADIUS client.
ï‚· The shared key configured on the RADIUS server must be consistent with that configured on the RADIUS client.
To Next Page
Loading...
Need help?
General