radius-server called-station-id include

Function

The radius-server called-station-id include command configures a method of constructing the No. 30 RADIUS public attribute, namely, Called-Station-Id.

The undo radius-server called-station-id command deletes the configured method of constructing the No. 30 RADIUS public attribute.

By default, no method of constructing the No. 30 RADIUS public attribute is configured.

This command is supported only on the NetEngine 8000 F1A.

Format

radius-server called-station-id include { ap-ip account-request | [ delimiter delimiter ] { ap-mac [ mac-format type1 ] [ delimiter delimiter ] | ssid [ delimiter delimiter ] } ^* }

undo radius-server called-station-id

Parameters

Parameter	Description	Value
ap-ip	Indicates that the IP address of the AP/AC is encapsulated in the Called-Station-Id attribute based on the IP format in dotted decimal notation in Accounting-Request packets.	-
account-request	Specified accounting request packets.	-
delimiter delimiter	Indicates the delimiter.	The value is an enumerated type and can be b, *, -, \, #, $, @, &, or :.
ap-mac	Indicates that the No. 30 RADIUS public attribute Called-Station-Id is constructed based on the AP-MAC address.	-
mac-format	Indicates the delimiter of MAC address.	Specifies type1 so that the MAC address is displayed in the format of aa-bb-cc-dd-ee-ff. By default, the MAC address is displayed in the format of aa:bb:cc:dd:ee:ff.
type1	Specifies type1 so that the MAC address is displayed in the format of aa-bb-cc-dd-ee-ff.	-
ssid	Indicates that the No. 30 RADIUS public attribute Called-Station-Id is constructed based on the SSID.	-

Views

RADIUS server group view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
radius	write

Usage Guidelines

Usage Scenario

When a Huawei device is connected to another device not conforming to relevant standards, you can run the radius-server called-station-id command to configure the Huawei device to construct the No. 30 RADIUS public attribute.

The radius-server called-station-id include ap-ip account-request command helps locate unauthorized users. When the device functions as a proxy, terminals are dynamically assigned IP addresses. To perform source tracing for terminals, the device must inform the AAA server of the terminals' actual IP addresses. After running this command, the terminals' IP addresses are delivered to the device through RADIUS packets, then the device identifies the IP addresses and encapsulate them in the Called-Station-Id attribute to be sent to the AAA server.

The AP-MAC and SSID are unavailable on the device. You must run the wlan option82 decode-mode command to allow the device to parse the AP-MAC or SSID from Option 82 in user packets.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Configure the No. 30 RADIUS public attribute to be constructed based on the SSID.

<HUAWEI> system-view
[~HUAWEI] radius-server group huawei
[*HUAWEI-radius-huawei] commit
[~HUAWEI-radius-huawei] radius-server called-station-id include ssid