radius-attribute service-type with-authenonly-reauthen

Function

The radius-attribute service-type with-authenonly-reauthen command set the reauthentication mode to reauthentication only.

The undo radius-attribute service-type with-authenonly-reauthen command restores the reauthentication mode to reauthentication and reauthorization.

By default, this command is not configured and the reauthentication mode is reauthentication and reauthorization.

Format

radius-attribute service-type with-authenonly-reauthen

undo radius-attribute service-type with-authenonly-reauthen

Parameters

None

Views

RADIUS server template view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

A large number of users are online at the same time and each user has a lot of authorization information. If the users need to be reauthenticated, the device delivers authorization information to each user after the authentication is successful. It is difficult for the device to process a lot of authorization information. As a result, users go offline due to authorization failures. After the radius-attribute service-type with-authenonly-reauthen command is run in the RADIUS server template view, the device only reauthenticates users during reauthentication, and does not redeliver authorization information, preventing users from going offline due to authorization failures.

Precautions

After this command is configured, users still use the original authorization information after being successfully reauthenticated even if the user authorization information changes.

This function takes effect after the Service-Type attribute on the RADIUS server is set to Authenticate Only.

Example

# Set the reauthentication mode to reauthentication only.

<HUAWEI> system-view
[HUAWEI] radius-server template test
[HUAWEI-radius-test] radius-attribute service-type with-authenonly-reauthen