< Home

display radius-server authorization configuration

Function

The display radius-server authorization configuration command displays the configuration of RADIUS authorization servers.

Format

display radius-server authorization configuration

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

After running the radius-server authorization command to configure an authorization server, run the display radius-server authorization configuration command to check whether the authorization server configuration is correct.

Example

# Display the configuration of RADIUS authorization servers.

<HUAWEI> display radius-server authorization configuration
 ------------------------------------------------------------------------------
 Attribute decode same as template    :  N
 Attribute encode same as template    :  Y
 User information match type          :  all
 Calling-station-id decode MAC-format :  xx-xx-xx-xx-xx-xx
 Port                                 :  3799
 Bounce port disable                  :  Y                                      
 Down port disable                    :  N 
 ------------------------------------------------------------------------------
 ------------------------------------------------------------------------------
 IP-Address      Shared-key               Group                         Protect
 ------------------------------------------------------------------------------
 10.10.1.114     ****************         -                                  Y
 vpn-instance : -
 ------------------------------------------------------------------------------
 1 RADIUS authorization server(s) in total
Table 1 Description of the display radius-server authorization configuration command output

Item

Description

Attribute decode same as template

Whether the device parses attributes in the RADIUS dynamic authorization packet based on the configurations in the RADIUS server template.

To configure this field, run the radius-server authorization attribute-decode-sameastemplate command.

Attribute encode same as template

Whether the device encapsulates attributes in the CoA or DM Response packet based on the configurations in the RADIUS server template.

To configure this field, run the radius-server authorization attribute-encode-sameastemplate command.

User information match type

Method used by a device to perform a match check between the RADIUS attribute in the received CoA or DM Request packet and user information on the device. The values are as follows:
  • all: The device performs a match check between all attributes in the received CoA or DM Request packet and user information on the device.
  • any: The device performs a match check between an attribute in the received CoA or DM Request packet and user information on the device.

To configure this field, run the radius-server authorization match-type command.

Calling-station-id decode MAC-format

Format of the MAC address that can be parsed by the device and is configured in the system view in the Calling-Station-Id field of the CoA or DM Response packet.

To configure this field, run the radius-server authorization calling-station-id decode-mac-format command.

Port

Port ID of the RADIUS authorization server.

To configure this field, run the radius-server authorization port command.

Bounce port disable

Whether the function of ignoring the authorization attribute indicating that the port is intermittently interrupted in a CoA packet is disabled.

To configure this field, run the radius-server authorization hw-ext-specific command bounce-port disable command.

Down port disable

Whether the function of ignoring the authorization attribute indicating that the port is disabled in a CoA packet is disabled.

To configure this field, run the radius-server authorization hw-ext-specific command down-port disable command.

IP-Address

IP address of a RADIUS authorization server.

To configure this field, run the radius-server authorization command.

Shared-key

Shared key of the RADIUS authorization server.

To configure this field, run the radius-server authorization command.

Group

RADIUS server group matching the RADIUS authorization server.

To configure this field, run the radius-server authorization command.

Protect

Whether the security hardening function is enabled.

To configure this field, run the radius-server authorization command.

vpn-instance

Name of the VPN instance that the RADIUS authorization server is bound to.

To configure this field, run the radius-server authorization command.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >