Configuring the RADIUS Protocol

227

communicate, NAS returns to the primary server. The following commands can be used to set the primary server to be active manually, so that NAS can communicate with it immediately after troubleshooting.

When the primary and second servers are both active or block, NAS sends the packets to the primary server only.

Perform the following configurations in RADIUS server group view.

Table 247 Set RADIUS Server State

Operation

Command

 

 

 

Set the state of primary RADIUS server

state

primary { accounting

 

authentication } { block active }

Set the state of second RADIUS server

state

secondary { accounting

 

authentication } { block active }

 

 

 

By default, the state of each server in RADIUS server group is active.

Setting Username Format Transmitted to RADIUS Server

As mentioned before, clients are generally named in userid@isp-name format. The part following “@” is the ISP domain name. The Switch 7750 will put users into different ISP domains according to their domain name. However, some earlier RADIUS servers rejected the username including ISP domain name. In this case, you have to remove the domain name before sending the username to the RADIUS server. The following command decides whether the username to be sent to RADIUS server carries ISP domain name or not.

Table 248 Set Username Format Transmitted to RADIUS Server

Operation

Command

 

 

Set username format transmitted to the

user-name-format { with-domain

RADIUS Server

without-domain }

 

 

If a RADIUS server group is configured not to allow usernames including ISP domain names, the RADIUS server group cannot be simultaneously used in more than one ISP domain. Otherwise, the RADIUS server will regard two users in different ISP domains as the same user by mistake, if they have the same username (excluding their respective domain names.)

By default, the RADIUS server group acknowledges that the username sent to it includes ISP domain name.

Setting the Unit of Data Flow that Transmitted to RADIUS Server

The following command defines the unit of the data flow sent to RADIUS server.

Table 249 Set the Unit of Data Flow Transmitted to RADIUS Server

Operation

Command

 

 

Set the unit of data flow transmitted to

data-flow-format data { byte

RADIUS server

giga-byte kilo-byte mega-byte

 

} packet { giga-byte kilo-byte

 

mega-byte one-packet }

 

 

Page 227
Image 227
3Com 10014298 manual Setting Username Format Transmitted to Radius Server, Set Radius Server State