authentication-profile (system view)

Function

The authentication-profile command creates an authentication profile and displays the authentication profile view.

The undo authentication-profile command deletes the authentication profile.

By default, the device has six built-in authentication profiles: default_authen_profile, dot1x_authen_profile, mac_authen_profile, portal_authen_profile, dot1xmac_authen_profile, and multi_authen_profile.

Format

authentication-profile name authentication-profile-name

undo authentication-profile name authentication-profile-name

Parameters

Parameter	Description	Value
name authentication-profile-name	Specifies the name of an authentication profile.	The value is a string of 1-31 case-sensitive characters, which cannot be configured to - and --. It cannot contain spaces and the following symbols: / \ : * ? " < > \| @ ' %.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

NAC can implement access control on users. The device uses authentication profiles to uniformly manage NAC configuration so that users can easily configure NAC functions. The parameters (for example, the bound access profile and authentication type) in the authentication profile can be configured to provide various access control modes for different users. After the configuration is complete, the authentication profile is applied to the interface or VAP profile to enable NAC.

Follow-up Procedure

Configuring authentication profiles: Configure the access profile, and authorization information in the authentication profiles.
Applying authentication profiles: Run the authentication-profile (Interface view or VAP profile view) command to apply the authentication profiles to the interface or VAP profile.

Precautions

The built-in authentication profile default_authen_profile and the compatibility profile converted after an upgrade are not counted in the configuration specification. The six built-in authentication profiles (default_authen_profile, dot1x_authen_profile, mac_authen_profile, portal_authen_profile, dot1xmac_authen_profile, and multi_authen_profile) can be modified and applied, but cannot be deleted.
Before deleting an authentication profile, ensure that this profile is not bound to any interface or VAP profile. You can run the display authentication-profile configuration command to check whether the authentication profile is bound to an interface or VAP profile

Example

# Create the authentication profile named mac_authen_profile1.

<HUAWEI> system-view
[HUAWEI] authentication-profile name mac_authen_profile1