HP VPN Firewall Appliances Access Control Configuration Guide

161
Ste
p
Command Remarks
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Specify the NAS-Port-Type
value for the interface.
portal nas-port-type { ethernet |
wireless }
Not configured by default.
Specifying the NAS-Port-ID for an interface
If the device uses a RADIUS server for authentication, authorization, and accounting of portal users,
when a portal user logs on from an interface, the device sends a RADIUS request that carries the
NAS-Port-ID attribute to the RADIUS server. The portal server configuration determines the usage of the
NAS-Port-ID attribute.
To specify the NAS-Port-ID value carried in a RADIUS request sent from an interface:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure the
NAS-Port-ID value.
portal nas-port-id
nas-port-id-value
By default, no NAS-Port-ID value is specified for
an interface, and the device uses the information
obtained from the physical interface where the
portal user accesses as the NAS-Port-ID value in
a RADIUS request.
Specifying a NAS ID profile for an interface
In some networks, user access points are identified by their access VLANs. Network carriers need to use
NAS-identifiers to identify user access points. With the NAS ID profile specified on an interface, when a
user logs in from the interface, the access device checks the specified profile to obtain the NAS ID that
is bound with the access VLAN. The value of this NAS ID is used as the NAS-identifier attribute in the
RADIUS packets to be sent to the RADIUS server.
The NAS ID profile defines the binding relationship between VLANs and NAS IDs. A NAS ID-VLAN
binding is defined by the nas-id id-value bind vlan vlan-id command, which is described in detail in AAA
configuration commands in Access Control Command Reference.
If no NAS-ID profile is specified for an interface or no matching binding is found in the specified profile,
the device uses the configured NAS ID as that of the interface.
To configure a NAS ID profile on an interface:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a NAS ID profile and
enter NAS ID profile view.
aaa nas-id profile profile-name
For more information about the
command, see Access Control
Command Reference.