Operation Manual - Security
Quidway S3500 Series Ethernet Switches Chapter 3 AAA and RADIUS Protocol Configuration
Huawei Technologies Proprietary
3-19
z If the switch affirms that the primary server does not respond, it then sends
RADIUS packets to the secondary RADIUS server.
z After each quiet time interval, the switch sets the status of the primary RADIUS
server to active, and sends RADIUS packets to it next time.
Perform the following configurations in RADIUS scheme view.
Table 3-23 Configuring the quiet time interval
Operation Command
Set the quiet time interval
timer quiet minutes
Set the quiet time interval to its default value
undo timer quiet
By default, the value of the Quiet time interval is 5.
3.3.15 Setting Username Format Transmitted to RADIUS Server
As mentioned above, the supplicants are generally named in userid@isp-name format.
The part following “@” is the ISP domain name. Quidway Series Switches will put the
users into different ISP domains according to the domain names. However, some
earlier RADIUS servers reject the username including ISP domain name. In this case,
you have to remove the domain name before sending the username to the RADIUS
server. The following command of switch decides whether the username to be sent to
RADIUS server carries ISP domain name or not.
Perform the following configurations in RADIUS scheme view.
Table 3-24 Setting username format transmitted to RADIUS server
Operation Command
Set Username Format Transmitted to
RADIUS Server
user-name-format { with-domain |
without-domain }
Note:
If a RADIUS scheme is configured not to allow usernames including ISP domain names,
the RADIUS scheme shall not be simultaneously used in more than one ISP domain.
Otherwise, the RADIUS server will regard two users in different ISP domains as the
same user by mistake, if they have the same username (excluding their respective
domain names.)
By default, as for the newly created RADIUS scheme, the username sent to RADIUS
servers includes an ISP domain name; as for the "system" RADIUS scheme created by
the system, the username sent to RADIUS servers excludes the ISP domain name.
To Next Page
Loading...
Need help?
General
