R3204P16-HP Load Balancing Module Security Command Reference-6PW101

117
If a RADIUS scheme defines that the username is sent without the ISP domain name, do not apply the
RADIUS scheme to more than one ISP domain, thus avoiding the confused situation where the RADIUS
server regards two users in different ISP domains but with the same user ID as one.
For 802.1X users using EAP authentication, the user-name-format command configured for a RADIUS
scheme does not take effect and the module does not change the usernames from clients before
forwarding them to the RADIUS server.
If the RADIUS scheme is for roaming wireless users, specify the keep-original keyword. Otherwise,
authentication of the wireless users may fail.
You can use this command to change the setting only when no user is using the RADIUS scheme.
Related commands: radius scheme.
Examples
# Specify the LB module to remove the domain name in the username sent to the RADIUS servers for the
RADIUS scheme radius1.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] user-name-format without-domain