radius-attribute usermac-as-option61

Function

The radius-attribute usermac-as-option61 command allows the device to encapsulate the Option61 field into the No.153 proprietary attribute on the RADIUS server, hw-user-mac attribute. If you also configure the client-option82 version1 command on the BAS interface, the client-id information (DHCPv4 Option61/DHCPv6 Option1/PPPoE PADR Tag 0x0103 Host-unique) is encapsulated into the Class attributes in RADIUS accounting packets.

The undo radius-attribute usermac-as-option61 command cancels the configuration.

By default, the MAC address is directly encapsulated into the hw-user-mac attribute, and the client-id information is not encapsulated into the Class attributes in RADIUS accounting packets.

This command is supported only on the NetEngine 8000 F1A.

Format

radius-attribute usermac-as-option61

undo radius-attribute usermac-as-option61

Parameters

None

Views

RADIUS server group view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
radius	write

Usage Guidelines

Usage Scenario

When the device is connected to a non-Huawei device that supports a different hw-user-mac attribute format, run the radius-attribute usermac-as-option61 command to allow the device to encapsulate the Option61 field into the hw-user-mac attribute.

Configuration Impact

If an operator's accounting system requires the Class attribute to encapsulate the client-id information (DHCPv4 Option61/DHCPv6 Option1/PPPoE PADR Tag 0x0103 Host-unique), configure the radius-attribute usermac-as-option61 command in the RADIUS server group view and configure the client-option82 version1 command on the BAS interface. After the two commands are run, the client-id information is encapsulated into the Class attributes in RADIUS accounting packets.

NOTE:

The RADIUS server sends an authentication request packet carrying the Class attribute to the BRAS. The BRAS encapsulates the received Class attribute into an accounting request packet. Currently, the device supports eight Class attributes.

If RADIUS authentication is used, the BRAS encapsulates the client-id information into the Class attribute in a RADIUS accounting packet only when the number of Class attributes in the RADIUS authentication request packet is less than or equal to seven and the client has the client-id information. If only accounting is used, the BRAS encapsulates the client-id information into the Class attribute in a RADIUS accounting packet only if the client has the client-id information.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Allow the device to encapsulate the Option61 field into the hw-user-mac attribute.

<HUAWEI> system-view
[~HUAWEI] radius-server group huawei
[*HUAWEI-radius-huawei] radius-attribute usermac-as-option61