Configuring Standard RADIUS Attributes

Procedure

1. Run system-view

   The system view is displayed.

2. Run radius-server template template-name

   The RADIUS server template view is displayed.

   By default, the RADIUS server template named default is available on the device. This template can only be modified and cannot be deleted.

3. Configure standard RADIUS attributes.

   • Configure RADIUS attribute 4 (NAS-IP-Address) or 95 (NAS-IPv6-Address).

     • Run radius-attribute nas-ip { ip-address | ap-info }

       RADIUS attribute 4 (NAS-IP-Address) is configured.

       By default, the source IP address of the NAS is the value of the NAS-IP-Address attribute.

     • Run radius-attribute nas-ipv6 ipv6-address

       RADIUS attribute 95 (NAS-IPv6-Address) is configured.

       By default, the NAS-IPv6-Address attribute is not configured.

   • Configure RADIUS attribute 5 (NAS-Port).

     1. Run radius-server nas-port-format { new | old }

        The format of the NAS port is configured.

        By default, the new NAS port format is used.

        When the new NAS port format is used, you can perform the following operation to configure the specific format.

     2. Run radius-server format-attribute nas-port nas-port-sting

        The new NAS port format is configured.

        By default, the default new NAS port format is used.

   • Configure RADIUS attribute 30 (Called-Station-Id).

     1. Run called-station-id wlan-user-format { ap-mac | ac-mac | ac-ip | ap-name | ap-group-name | vlanid | ap-location } [ include-ssid [ delimiter delimiter ] ]

        The encapsulation content of RADIUS attribute 30 (Called-Station-Id) is configured.

        By default, the encapsulation content of the Called-Station-Id (30) attribute is the AP's MAC address and SSID separated with a colon (:), in the format of ap-mac:ssid.

        You can perform the following operation to set the encapsulation format of the AP or AC MAC address in the Called-Station-Id (30) attribute.

        

        Only the S5730-HI, S5731-H, S5731S-H, S6730-H, S6730S-H, S5732-H, S6720-HI, and S5720-HI support this command.

     2. Run called-station-id mac-format { dot-split | hyphen-split } [ mode1 | mode2 ] [ lowercase | uppercase ]

        Or run called-station-id mac-format unformatted [ lowercase | uppercase ]

        The encapsulation format of the MAC address in the Called-Station-Id (30) attribute is configured.

        By default, the MAC address format in the Called-Station-Id (30) attribute is XX-XX-XX-XX-XX-XX, in uppercase.

   • Configure RADIUS attribute 31 (Calling-Station-Id).

     Run calling-Station-Id mac-format { dot-split | hyphen-split | colon-split } [ mode1 | mode2 ] [ lowercase | uppercase ]

     Or run calling-Station-Id mac-format { unformatted [ lowercase | uppercase ] | bin }

     The encapsulation format of the MAC address in the Calling-Station-Id (31) attribute is configured.

     By default, the MAC address format in the Calling-Station-Id (31) attribute is xxxx-xxxx-xxxx, in lowercase

   • Configure RADIUS attribute 32 (NAS-Identifier).

     Run radius-server nas-identifier-format { hostname | vlan-id | ap-info }

     The encapsulation format of the NAS-Identifier attribute is configured.

     By default, the NAS-Identifier encapsulation format is the user's hostname.

   • Configure RADIUS attribute 80 (Message-Authenticator).

     Run radius-server attribute message-authenticator access-request

     The device is configured to carry RADIUS attribute 80 (Message-Authenticator) in RADIUS authentication packets.

     By default, the device does not carry RADIUS attribute 80 (Message-Authenticator) in RADIUS authentication packets.

   • Configure RADIUS attribute 87 (NAS-Port-Id).

     Run radius-server nas-port-id-format { new [ client-option82 ] | old | vm | vendor vendor-id }

     The format of the NAS-Port-Id attribute is configured.

     By default, the new format of the NAS-Port-Id attribute is used.

     

     Only the S5720-EI supports the vm parameter.

   • Configure RADIUS attribute 89 (Chargeable-User-Identity).

     Run radius-server support chargeable-user-identity [ not-reject ]

     The device is configured to support the CUI attribute.

     By default, the device does not support the CUI attribute.

   • Run radius-attribute cut hw-portal-url key-words [ end mark ]

     The device is configured to delete the specified content from the URL contained in the Huawei RADIUS attribute 26-156 (HW-Portal-URL).

     By default, the device does not process the URL contained in the Huawei RADIUS attribute 26-156 (HW-Portal-URL).