service-policy download
Function
The service-policy download command configures a mode in which an EDSG service policy is obtained.
undo service-policy download command cancels the current configuration.
By default, a device obtains an EDSG service policy from the local configuration.
This command is supported only on the NetEngine 8000 F1A.
Parameters
| Parameter | Description | Value |
|---|---|---|
| local |
Indicates that a device obtains an EDSG service policy from the local configuration. If both local and radius are specified, their configuration sequence determines the sequence in which a service policy is obtained. local radius indicates that a service policy is obtained first from the local configuration and then from a RADIUS server; radius local indicates that a service policy is obtained first from a RADIUS server and then from the local configuration. |
- |
| radius |
Indicates that a device obtains an EDSG service policy from the RADIUS server. |
- |
| server-group |
Specifies the name of a RADIUS server group. |
The value is a string of 1 to 32 characters. |
| cipher cipher-password |
Specifies an encrypted password. The new password is at least eight characters long and contains at least two of the following types: upper-case letters, lower-case letters, digits, and special characters. |
The value is a string of 1 to 16 and 1 to 128 case-sensitive characters, spaces not supported. |
Usage Guidelines
Usage Scenario
The EDSG service allows a device to obtain an EDSG service policy from the local configuration, RADIUS server, or their combination.
Prerequisites
A RADIUS server group has been configured if an EDSG service policy needs to be obtained from a RADIUS server.
Configuration Impact
After the
service-policy download command is run on a device, the device obtains an EDSG service policy in any of the following modes:- Local: A service name is used as an index to obtain an EDSG service policy from the local configuration.
- RADIUS: A service name is used as a user name and authentication packets are used to obtain an EDSG service policy from a RADIUS server. The obtained EDSG service policy is cached to the local device and will not be deleted if it is referenced by any service instance. The EDSG service policy does not need to be repeatedly obtained.
- First from the local configuration and then from an RADIUS server: A device first attempts to obtain an EDSG service policy from the local configuration. If no EDSG service policy is locally configured, the device obtains an EDSG service policy from an RADIUS server.
- First from an RADIUS server and then from the local configuration: A device first attempts to obtain an EDSG service policy from an RADIUS server. If the RADIUS server does not respond after expiration, the device obtains an EDSG service policy from the local configuration.
Precautions
A password is required if you specify the RADIUS mode.
Example
<HUAWEI> system-view [~HUAWEI] radius-server group rad1 [*HUAWEI-radius-rad1] commit [~HUAWEI-radius-rad1] quit [~HUAWEI] service-policy name test edsg [*HUAWEI-service-policy-test] commit [~HUAWEI-service-policy-test] radius-server group rad1 [~HUAWEI-service-policy-test] quit [~HUAWEI] service-policy download radius rad1 password cipher Huawei_123