HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

53
Step Command Remarks
2. Tear down AAA user
connections.
cut connection
{
access-type
{
dot1x
|
mac-authentication
|
portal
} |
all
|
domain
isp-name |
interface
interface-type
interface-number |
ip
ip-address |
mac
mac-address
|
ucibindex
ucib-index |
user-name
user-name |
vlan
vlan-id }
The command
applies to LAN,
portal, and PPP
user connections.
Configuring a NAS ID-VLAN binding
The access locations of users can be identified by their access VLANs. In application scenarios
where identifying the access locations of users is a must, configure NAS ID-VLAN bindings on the
device. Then, when a user gets online, the device obtains the NAS ID by the access VLAN of the
user and sends the NAS ID to the RADIUS server through the NAS-identifier attribute.
To configure a NAS ID-VLAN binding:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Create a NAS ID profile and
enter NAS ID profile view.
aaa nas-id profile
profile-name
You can apply a NAS ID profile to
an interface enabled with portal.
See "Configuring portal
authentication."
3. Configure a NAS ID-VLAN
binding.
nas-id
nas-identifier
bind vlan
vlan-id
By default, no NAS ID-VLAN
binding exists.
Configuring the router as a RADIUS server
The following matrix shows the feature and hardware compatibility:
Hardware Feature compatibility
MSR900 No
MSR93X No
MSR20-1X Yes
MSR20 Yes
MSR30 Yes
MSR50 No
MSR1000 Yes
RADIUS server functions configuration task list
Task Remarks
Configuring a RADIUS user
Required.
Specifying a RADIUS client
Required.

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English