The radius-server user-name domain-included command configures the device to encapsulate the domain name in the user name in RADIUS packets to be sent to a RADIUS server.
The radius-server user-name original command configures the device not to modify the user name entered by the user in the packets sent to the RADIUS server.
The undo radius-server user-name domain-included command configures the device not to encapsulate the domain name in the user name when sending RADIUS packets to a RADIUS server.
The undo radius-server user-name domain-included except-eap command configures the device not to encapsulate the domain name in the user name when sending packets to a RADIUS server (applicable to other authentication modes except EAP authentication).
By default, the device does not modify the user name entered by the user in the packets sent to the RADIUS server.
radius-server user-name domain-included
radius-server user-name original
undo radius-server user-name domain-included
undo radius-server user-name domain-included except-eap
Usage Scenario
The format of a user name is user name@domain name. In the user name, @ is the domain name delimiter. The domain name delimiter can also be any of the following symbols: \ / : < > | ' %.
If the RADIUS server does not accept the user name with the domain name, run the undo radius-server user-name domain-included command to delete the domain name from the user name.
Precautions
If the user names in the RADIUS packets sent from the device to RADIUS server contain domain names, ensure that the total length of a user name (user name + domain name delimiter + domain name) is not longer than 253 characters; otherwise, the user name cannot be contained in RADIUS packets. As a result, authentication will fail.