kerberos-snooping-profile (authentication profile view)

Function

The kerberos-snooping-profile command binds a Kerberos snooping profile to an authentication profile.

The undo kerberos-snooping-profile command unbinds a Kerberos snooping profile from an authentication profile.

By default, no Kerberos snooping profile is bound to an authentication profile.

Format

kerberos-snooping-profile profile-name

undo kerberos-snooping-profile

Parameters

Parameter	Description	Value
profile-name	Specifies the name of a Kerberos snooping profile.	The value must be the name of an existing Kerberos snooping profile.

Views

Authentication profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The authentication type used by an authentication profile is determined by the access profile bound to the authentication profile. After a Kerberos snooping profile is bound to an authentication profile, Kerberos snooping is enabled on the interface to which the authentication profile is applied. The interface then can control network access rights of users.

Prerequisites

A Kerberos snooping profile has been created using the kerberos-snooping-profile command in the system view.

Follow-up Procedure

Run the authentication-profile command in the interface view and VAP profile view to apply the authentication profile to a Layer 2 physical interface.

Precautions

An authentication profile can have only one Kerberos snooping profile bound.

Example

# Bind the Kerberos snooping profile profile1 to the authentication profile authen1.

<HUAWEI> system-view
[HUAWEI] kerberos-snooping-profile name profile1
[HUAWEI-krb-snooping-profile-profile1] quit
[HUAWEI] authentication-profile name authen1
[HUAWEI-authen-profile-authen1] kerberos-snooping-profile profile1