radius-server authorization attribute-decode-sameastemplate

Function

The radius-server authorization attribute-decode-sameastemplate command configures the device to parse RADIUS dynamic authorization packet attributes based on the configuration in RADIUS server template.

The undo radius-server authorization attribute-decode-sameastemplate command restores the default method of parsing RADIUS authorization packet attributes.

By default, the device parses the MAC address in the calling-station-id attribute carried in RADIUS dynamic authorization packets based on the MAC address length, without considering the MAC address format and delimiter.

Format

radius-server authorization attribute-decode-sameastemplate

undo radius-server authorization attribute-decode-sameastemplate

Parameters

None.

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

The device parses the MAC address in the Calling-Station-Id attribute in RADIUS dynamic authorization packets. By default, the MAC address format that can be parsed is configured using the radius-server authorization calling-station-id decode-mac-format command in the system view. When the device is connected to multiple RADIUS servers, the MAC address formats are different in the Calling-Station-Id attribute in dynamic authorization packets sent by different RADIUS servers. In this case, the MAC address may fail to be parsed if the same parse mode is used, resulting in that the device fails to be connected to some RADIUS servers. You can run the radius-server authorization attribute-decode-sameastemplate command to configure the device to parse RADIUS dynamic authorization packet attributes based on the Calling-Station-Id attribute encapsulation mode configured in each RADIUS server template, making the device be successfully connected to multiple RADIUS servers.

Prerequisites

This function is used to make the Calling-Station-Id attribute parse mode the same as the Calling-Station-Id attribute encapsulation mode configured in RADIUS server template. Therefore, make sure that the following steps have been performed before using this function.

The calling-station-id mac-format command has been run in the RADIUS server template view to configure the encapsulation mode of the MAC address in the Calling-Station-Id attribute.
The radius-server authorization command has been run in the system view to configure the authorization server to use the RADIUS server template server-group.

If the RADIUS server template used by the authorization server is not specified, this function cannot be implemented on a device. You can run the radius-server authorization calling-station-id decode-mac-format command in the system view to configure the Calling-Station-Id attribute parse mode.

Precautions

The configuration in a RADIUS server template has a higher priority than the global configuration.

Example

# Configure the RADIUS authorization server to parse attributes depending on the configuration in a RADIUS template.

<HUAWEI> system-view
[HUAWEI] radius-server authorization attribute-decode-sameastemplate