3Com Switch 7750 Configuration Guide

AAA Configuration 523
c
CAUTION:
■ In string mode, if the VLAN ID assigned by the RADIUS server is a character
string containing only digits (for example, 1024), the switch first regards it as
an integer VLAN ID: the switch transforms the string to an integer value and
judges if the value is in the valid VLAN ID range; if it is, the switch adds the
authenticated port to the VLAN with the integer value as the VLAN ID (VLAN
1024, for example).
■ To implement dynamic VLAN assignment on a port where both MSTP and
802.1x are enabled, you must set the MSTP port to an edge port.
Configuring the
Attributes of a Local
User
When local scheme is chosen as the AAA scheme, you should create local users
on the switch and configure the relevant attributes.
The local users are users set on the switch, with each user uniquely identified by a
user name. To make a user who is requesting network service pass through the
local authentication, you should add an entry in the local user database on the
switch for the user.
Create an ISP domain
and enter its view
domain isp-name -
Set the VLAN
assignment mode
vlan-assignment-mode { inte
ger | string }
Optional
By default, the VLAN assignment
mode is integer.
Create a VLAN and
enter its view
vlan vlan-id -
Set a VLAN name for
VLAN assignment
name string This operation is required if the
VLAN assignment mode is set to
string.
Table 404 Configure dynamic VLAN assignment
Operation Command Description
Table 405 Configure the attributes of a local user
Operation Command Description
Enter system view system-view -
Add a local user and enter
local user view
local-user user-name Required
By default, there is no local user
in the system.
Set a password for the
specified user
password { simple |
cipher } password
Optional
Set the password display mode
of all local users
local-user
password-display-mode
{ cipher-force | auto }
Optional
By default, the password display
mode of all access users is auto,
indicating the passwords of
access users are displayed in the
modes set with the password
command.
Set the state of the specified
user
state { active | block } Optional
By default, the local users are in
the active state once they are
created, that is, they are allowed
to request network services.