Switch 7700 Configuration Guide

Configuring the AAA and RADIUS Protocols 197
If a RADIUS server group is configured not to allow usernames including ISP
domain names, the RADIUS server group shall not be simultaneously used in more
than one ISP domain. Otherwise, the RADIUS server will regard two users in
different ISP domains as the same user by mistake, if they have the same
username (excluding their respective domain names.)
By default, RADIUS server group acknowledges that the username sent to it
includes ISP domain name.
Setting the Unit of Data Flow that Transmitted to RADIUS Server
The following command defines the unit of the data flow sent to RADIUS server.
By default, the default data unit is byte and the default data packet unit is one
packet.
Configuring a Local RADIUS Server Group
RADIUS service adopts authentication/authorization/accounting servers to manage
users. Besides, local authentication/authorization/accounting service is also used in
these products and it is called local RADIUS function, i.e. realize basic RADIUS
function on the switch.
Perform the following commands in system view to create/delete local RADIUS
server group.
By default, the IP address of local RADIUS server group is 127.0.0.1 and the
password is 3com.
When using local RADIUS server function of the Switch 7700, remember the
number of UDP port used for authentication is 1812 and that for accounting is
1813.
Displaying and
Debugging the AAA and
RADIUS Protocols
After you configure RADIUS, execute the display command in all views to display
the running of the AAA and RADIUS configuration, and to verify the effect of the
configuration. Execute the reset command in user view to reset AAA and RADIUS
Tabl e 31 Set the Unit of Data Flow Transmitted to RADIUS Server
Operation Command
Set the unit of data flow
transmitted to RADIUS server
data-flow-format data [byte | giga-byte | kilo-byte |
mega-byte] packet [giga-byte | kilo-byte | mega-byte |
one-packet]
Tabl e 32 Create/Delete a Local RADIUS Server Group
Operation Command
Create a local RADIUS server
group and enter its view
local-radius nas-ip ip-address key password
Delete a local RADIUS server
group
undo local-radius nas-ip ip-address