3Com Switch 7750 Configuration Guide Guide

AAA Configuration 501
c
CAUTION:
■ In string mode, if the VLAN ID assigned by the RADIUS server is a character
string containing only digits (for example, 1024), the switch first regards it as
an integer VLAN ID: the switch transforms the string to an integer value and
judges if the value is in the valid VLAN ID range; if it is, the switch adds the
authenticated port to the VLAN with the integer value as the VLAN ID (VLAN
1024, for example).
■ To implement dynamic VLAN assignment on a port where both MSTP and
802.1x are enabled, you must set the MSTP port to an edge port.
Configuring the
Attributes of a Local
User
When local scheme is chosen as the AAA scheme, you should create local users
on the switch and configure the relevant attributes.
The local users are users set on the switch, with each user uniquely identified by a
user name. To make a user who is requesting network service pass through the
local authentication, you should add an entry in the local user database on the
switch for the user.
Set the VLAN assignment
mode
vlan-assignment-mode {
integer | string }
Optional
By default, the VLAN
assignment mode is integer.
Create a VLAN and enter its
view
vlan vlan-id -
Set a VLAN name for VLAN
assignment
name string
This operation is required if
the VLAN assignment mode is
set to string.
Table 379 Configure dynamic VLAN assignment
Operation Command Description
Table 380 Configure the attributes of a local user
Operation Command Description
Enter system view system-view -
Add a local user and enter
local user view
local-user user-name
Required
By default, there is no local
user in the system.
Set a password for the
specified user
password { simple | cipher }
password
Optional
Set the password display
mode of all local users
local-user
password-display-mode {
cipher-force | auto }
Optional
By default, the password
display mode of all access
users is auto, indicating the
passwords of access users are
displayed in the modes set
with the password
command.
Set the state of the specified
user
state { active | block }
Optional
By default, the local users are
in the active state once they
are created, that is, they are
allowed to request network
services.