Disabling or Translating RADIUS Attributes

Context

RADIUS attributes supported by different vendors are incompatible with each other, so RADIUS attributes must be disabled or translated in interoperation and replacement scenarios.

Procedure

Run system-view
The system view is displayed.
Run radius-server template template-name
The RADIUS server template view is displayed.

By default, the RADIUS server template named default is available on the device. This template can only be modified, but cannot be deleted.
Run radius-server attribute translate
The RADIUS attribute disabling and translation functions are enabled.

By default, the RADIUS attribute disabling and translation functions are disabled.
Run radius-attribute disable attribute-name { receive | send } ^*
A RADIUS attribute is disabled.

By default, no RADIUS attribute is disabled.
Configure the RADIUS attribute to be translated.
- radius-attribute translate src-attribute-name dest-attribute-name { receive | send | access-accept | access-request | account-request | account-response } ^*
- radius-attribute translate extend vendor-specific src-vendor-id src-sub-id dest-attribute-name { access-accept | account-response } ^*
- radius-attribute translate extend src-attribute-name vendor-specific dest-vendor-id dest-sub-id { access-request | account-request } ^*
By default, no RADIUS attribute is translated.

Verifying the Configuration

Run the display radius-attribute [ name attribute-name | type { attribute-number1 | huawei attribute-number2 | microsoft attribute-number3 | dslforum attribute-number4 } ] command to check the RADIUS attributes supported by the device.
Run the display radius-attribute [ template template-name ] disable command to check the disabled RADIUS attributes.
Run the display radius-attribute [ template template-name ] translate command to check the RADIUS attribute translation configuration.