HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

304
Specifying NAS-Port-Type for an interface
NAS-Port-Type is a standard RADIUS attribute for indicating a user access port type. With this
attribute specified on an interface, when a portal user logs on from the interface, the device uses the
specified NAS-Port-Type value as that in the RADIUS request to be sent to the RADIUS server. If
NAS-Port-Type is not specified, the device uses the access port type obtained.
If there are multiple network devices between the Broadband Access Server (the portal
authentication access device) and a portal client, the BAS might not be able to obtain a user's correct
access port information. For example, for a wireless client using portal authentication, the access
port type obtained by the BAS might be the type of the wired port that authenticates the user. To
make sure that the BAS delivers the right access port information to the RADIUS server, specify the
NAS-Port-Type according to the practical access environment.
To specify the NAS-Port-Type value for an interface:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter interface view.
interface
interface-type
interface-number
N/A
3. Specify the NAS-Port-Type
value for the interface.
portal nas-port-type
{
ethernet
|
wireless
}
Not configured by default.
Specifying the NAS-Port-ID for an interface
If the device uses a RADIUS server for authentication, authorization, and accounting of portal users,
when a portal user logs on from an interface, the device sends a RADIUS request that carries the
NAS-Port-ID attribute to the RADIUS server. The portal server configuration determines the usage of
the NAS-Port-ID attribute.
To specify the NAS-Port-ID value carried in a RADIUS request sent from an interface:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter interface view.
interface
interface-type
interface-number
N/A
3. Configure the NAS-Port-ID
value.
portal nas-port-id
nas-port-id-value
By default, no NAS-Port-ID value
is specified for an interface, and
the device uses the information
obtained from the physical
interface where the portal user
accesses as the NAS-Port-ID
value in a RADIUS request.
Specifying a NAS ID profile for an interface
In some networks, user access points are identified by their access VLANs. Network carriers need to
use NAS-identifiers to identify user access points. With the NAS ID profile specified on an interface,
when a user logs in from the interface, the access device checks the specified profile to obtain the
NAS ID that is bound with the access VLAN. The value of this NAS ID is used as the NAS-identifier
attribute in the RADIUS packets to be sent to the RADIUS server.

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English