This section describes how to configure the format of the MAC address that can be parsed by a device in RADIUS dynamic authorization packets using the rpc method.
Operation |
XPATH |
---|---|
edit-config:create |
/huawei-aaa-radius:radius/dynamic-authorization-option |
Item |
Data |
Description |
---|---|---|
Separator in the MAC address in the calling-station-id attribute | dot-split | Configure the dot (.) as the separator in the MAC address in the calling-station-id attribute. |
Format of the MAC address in the calling-station-id attribute | compress | Configure the MAC address in the calling-station-id attribute to use the xxxx-xxxx-xxxx or xxxx.xxxx.xxxx format. |
Whether the device parses attributes in the RADIUS dynamic authorization packet based on the configurations in the RADIUS server template | true | Configure the device to parse attributes in the RADIUS dynamic authorization packet based on the configurations in the RADIUS server template. |
<rpc message-id="1" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<edit-config>
<target>
<running/>
</target>
<config>
<hw-aaa-radius:radius xmlns:hw-aaa-radius="urn:huawei:params:xml:ns:yang:huawei-aaa-radius">
<hw-aaa-radius:dynamic-authorization-option>
<hw-aaa-radius:decode-mac-format-calling-station-id>
<hw-aaa-radius:mac-address-format>dot-split</hw-aaa-radius:mac-address-format>
<hw-aaa-radius:mode>compress</hw-aaa-radius:mode>
</hw-aaa-radius:decode-mac-format-calling-station-id>
<hw-aaa-radius:decode-attribute-sameastemplate>true</hw-aaa-radius:decode-attribute-sameastemplate>
</hw-aaa-radius:dynamic-authorization-option>
</hw-aaa-radius:radius>
</config>
</edit-config>
</rpc>
Sample of successful response
<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="1"> <ok/> </rpc-reply>
Sample of failed response
<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="1"> <rpc-error> <error-app-tag>-1</error-app-tag> <error-message>Invalid mac-address-format</error-message> <error-info>Error on node /huawei-aaa-radius:radius/dynamic-authorization-option/decode-mac-format-calling-station-id</error-info> </rpc-error> </rpc-reply>