129
Specifying NAS-Port-Type for an interface
NAS-Port-Type is a standard RADIUS attribute for indicating a user access port type. With this attribute
specified on an interface, when a portal user logs on from the interface, the device uses the specified
NAS-Port-Type value as that in the RADIUS request to be sent to the RADIUS server. If NAS-Port-Type is not
specified, the device uses the access port type obtained.
If there are multiple network devices between the Broadband Access Server (BAS, the portal
authentication access device) and a portal client, the BAS may not be able to obtain a user's correct
access port information. For example, for a wireless client using portal authentication, the access port
type obtained by the BAS may be the type of the wired port that authenticates the user. To make sure that
the BAS delivers the right access port information to the RADIUS server, specify the NAS-Port-Type
according to the practical access environment.
Follow these steps to specify the NAS-Port-Type value for an interface:
To do… Use the command…
Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Specify the NAS-Port-Type value
for the interface
portal nas-port-type { ethernet |
wireless }
Required
Not configured by default
Specifying a NAS ID profile for an interface
In some networks, users' access points are identified by their access VLANs. Network carriers need to
use NAS-identifiers to identify user access points. With a NAS ID profile specified on an interface, when
a user logs in from the interface, the access device checks the specified profile to obtain the NAS ID that
is bound with the access VLAN. The value of this NAS ID is used as that of the NAS-identifier attribute
in the RADIUS packets to be sent to the RADIUS server.
A NAS ID profile defines the binding relationship between VLANs and NAS IDs. A NAS ID-VLAN
binding is defined by the nas-id id-value bind vlan vlan-id command, which is described in detail in AAA
configuration commands in the Security Command Reference.
If no NAS-ID profile is specified for an interface or no matching binding is found in the specified profile,
the device uses the device name as the interface NAS ID.
Follow these steps to configure a NAS ID profile on an interface:
To do… Use the command…
Remarks
Enter system view system-view —
Create a NAS ID profile
and enter NAS ID profile
view
aaa nas-id profile
profile-name
Required
For more information about the command, see
Security Command Reference.
Bind a NAS ID with a
VLAN
nas-id nas-identifier bind vlan
vlan-id
Required
For more information about the command, see
Security Command Reference.
Return to system view quit —
Enter interface view
interface interface-type
interface-number
—
To Next Page
Loading...
