3com S7906E 安装指导
1-11
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
interface-number
—
Specify an authentication
domain for the interface
domain for the interface
portal domain domain-name
Required
By default, no authentication
domain is specified for an
interface.
domain is specified for an
interface.
The device selects the authentication domain for a portal user on an interface in this order: the ISP
domain specified for the interface, the ISP domain carried in the username, and the system default ISP
domain. For descriptions on the default ISP domain, refer to AAA Configuration in the Security Volume.
Specifying a NAS ID Profile for an Interface
In some networks, user access points are identified by user access VLAN. Network carriers need to use
NAS-identifier to identify user access points. With a NAS ID profile specified on an interface, when a
user logs in from the interface, the access device will check the specified profile name to obtain the NAS
ID that is bound with the access VLAN. The value of this NAS ID will be used as that of the
NAS-identifier attribute in the RADIUS packets to be sent to the RADIUS server.
A NAS ID profile defines the binding relationship between VLANs and NAS IDs. A NAS ID-VLAN
binding is defined by the nas-id id-value bind vlan vlan-id command, which is described in detail in
AAA Commands of the Security Volume.
If no NAS-ID profile is specified for an interface or no matching binding is found in the specified profile:
z
If a NAS ID is configured using the portal nas-id command, the interface will use the configured
NAS ID as that of the interface.
z
If the interface does not support NAS ID configuration or has no NAS ID configured, it will use the
device name as the interface NAS ID.
Follow these steps to configure a NAS ID profile for an interface:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create a NAS ID profile and
enter NAS ID profile view
enter NAS ID profile view
aaa nas-id profile
profile-name
profile-name
Required
Refer to AAA Commands in the
Security Volume for details
about the command.
Security Volume for details
about the command.
Bind a NAS ID with a VLAN
nas-id nas-identifier bind vlan
vlan-id
vlan-id
Required
Refer to AAA Commands in the
Security Volume for details
about the command.
Security Volume for details
about the command.
Return to system view
quit
—