Configuring an Authentication Profile

This section describes the configuration model of authentication profile and provides examples of XML packets.

Data Model

Creating an Authentication Profile

Binding an 802.1X Access Profile to the Authentication Profile

Binding a MAC Access Profile to the Authentication Profile

Binding a Portal Access Profile to the Authentication Profile

Binding an Authentication-Free Rule Profile to the Authentication Profile

Configuring a Forcible Domain Based on the Access Type

Configuring the Default Domain Based on the Access Type

Configuring a Forcible Domain

Configuring the Default Domain

Configuring the User Access Mode

Configuring Network Access Rights for Users in Each Phase Before Authentication

Configuring the Function of Allowing Voice Terminals to Go Online Without Authentication

Configuring the Maximum Number of Access Users Allowed on the Interface in Multi-Authen Mode

Configuring the Switch to Re-authenticate Users When the Authentication Server Changes from Down to Up

Disabling the Pre-connection Function

Binding the Authentication Profile to an Interface

Configuring the Device to Allow Users to Access in Only One Authentication Mode

Configuring a Domain Name Resolution Scheme

Configuring the Interval for Re-authenticating Pre-connection Users

Configuring the Interval for Re-authenticating Users Who Fail to be Authenticated

Configuring the Aging Time for Pre-connection User Entries

Configuring the Aging Time for Entries of the Users Who Fail to be Authenticated

Configuring a Device to Send Accounting Packets for Address Updating

Configuring a Device to Send Accounting Packets for Roaming

Configuring Permitted Domains for WLAN Users

Configuring the Maximum Number of Authenticated Users Allowed in an Authentication Profile

Configuring the Device to Dynamically Adjust the Rate of Packets From NAC Users

Configuring the Bandwidth Share Mode

Configuring the Default Source IP Address of Offline Detection Packets

Configuring the Source IP Address and Source MAC Address of Offline Detection Packets in a VLAN

Configuring MAC Address Migration

Configuring not to Log Out Users When an Interface Link Is Faulty

Configuring the User Logout Delay When an Interface Link Is Faulty

Parent Topic: NAC

Copyright © Huawei Technologies Co., Ltd.

Copyright © Huawei Technologies Co., Ltd.

< Previous topic Next topic >