Huawei Quidway S3100 Series User Manual

Operation Manual – AAA&RADIUS
Quidway S3100 Series Ethernet Switches Chapter 1
AAA&RADIUS Configuration
Huawei Technologies Proprietary
1-14
 Note:
z If a bound AAA scheme is configured as well as the separate authentication,
authorization and accounting schemes, the separate ones will be adopted in
precedence.
z RADIUS scheme and local scheme do not support the separation of authentication
and authorization. Therefore, pay attention when you make authentication and
authorization configuration for a domain: if the scheme radius-scheme or scheme
local command is executed, the authorization none command is executed, while
the authentication command is not executed, the authorization information
returned from the RADIUS or local scheme still takes effect.
1.4 Dynamic VLAN Assignment Configuration
The dynamic VLAN assignment feature enables a switch to dynamically add the ports
of the successfully authenticated users to different VLANs according to the attributes
assigned by the RADIUS server, so as to control the network resources that different
users can access.
Currently, the switch supports the following two types of VLAN IDs assigned by its
RADIUS authentication server.
z Integer: The switch adds a port to the corresponding VLAN according to the VLAN
ID (integer value) assigned by the RADIUS authentication server. If the VLAN
does not exist, it first creates the VLAN, and then adds the port to the newly
created VLAN.
z String: The switch compares the VLAN ID (string value) assigned by the RADIUS
authentication server with the existing VLAN names on the switch. If it finds a
match, it adds the port to the corresponding VLAN. Otherwise, the VLAN
assignment fails and the user cannot pass the authentication.
In actual applications, to use this feature together with Guest VLAN, you should better
set port control to port-based mode; if you set port control to MAC-address-based
mode, each port can be connected to only one user.
1.4.1 Configuring Dynamic VLAN Assignment
Table 1-8 Configure dynamic VLAN assignment
Operation Command Description
Enter system view
system-view
—
Create an ISP
domain and enter its
view
domain isp-name
—

Huawei Quidway S3100 Series Specifications

General

Brand	Huawei
Model	Quidway S3100 Series
Category	Switch
Language	English