Command Manual - Security
Quidway S3500 Series Ethernet Switches Chapter 3 AAA & RADIUS Protocol Configuration Commands
Huawei Technologies Proprietary
3-43
Parameter
with-domain: Specifies to send the username with domain name to RADIUS server.
without-domain: Specifies to send the username without domain name to RADIUS
server.
Description
Using user-name-format command, you can configure the username format sent to
RADIUS server.
By default, as for the newly created RADIUS scheme, the username sent to RADIUS
servers includes an ISP domain name; as for the "system" RADIUS scheme created by
the system, the username sent to RADIUS servers excludes the ISP domain name.
The supplicants are generally named in userid@isp-name format. The part following
“@” is the ISP domain name. The switch will put the users into certain ISP domains
according to the domain names. However, some earlier RADIUS servers reject the
username including ISP domain name. In this case, the username will be sent to the
RADIUS server after its domain name is removed. Accordingly, the switch provides this
command to decide whether the username to be sent to RADIUS server carries ISP
domain name or not.
Note:
If a RADIUS scheme is configured to reject usernames including ISP domain names,
the RADIUS scheme shall not be simultaneously used in more than one ISP domains.
Otherwise, the RADIUS server will regard two users in different ISP domains as the
same user by mistake, if they have the same username (excluding their respective
domain names.)
For the related command, see radius scheme.
Example
# Specify to send the username without domain name to RADIUS server.
[Quidway-radius-huawei] user-name-format without-domain
To Next Page
Loading...
Need help?
General
