Configuring and Managing Users

Configuring a Static User

A user that requires a fixed IP address can be configured as a static user.

Configuring User Account Parsing

In a user account, a delimiter to separate the domain name from the username and the sequence of parsing them can be flexibly configured to meet different requirements.

Configuring a Username Generation Mode and Password

The NetEngine 8000 F supports the configuration of username generation modes and passwords. With the help of this function, no username or password needs to be entered for access users, such as binding users who attempt to get online through BAS interfaces.

Configuring the Limit on the Number of Access Users

You can limit the number of access users to control the user access rate and prevent threshold-crossing CPU usage.

Disconnecting Online Users

The NetEngine 8000 F can be configured to disconnect online users by a condition, such as the IP address, MAC address, access interface, or domain, or a combination of conditions.

Generating User Login Failure and Logout Records

You can determine the cause and time of users' online and offline behavior from their login and logout records.

(Optional) Configuring the Function to Generate and Send User Login, User Logout, and User Login Result Logs

User login, user logout, and user login result logs can be used to query user information, such as the user IP address and the time when a user went online or offline.

(Optional) Configuring the User Service Tracing Function

Configuring User Testing

User testing is used to locate a fault by checking whether a user can pass the authentication of a RADIUS server group when the AAA server does not function properly.

Changing the Period of Getting Online in Loose Mode

Getting online in loose mode after the NetEngine 8000 F restarts due to an exception reduces client restarts, but may consume a lot of resources. You can change the period during which users can get online in loose mode.

Configuring Whether to Log Out Users If an Interface Goes Down

Configuring Automatic User Login

Enabling User Traffic Statistics Collection Based on Inner or Outer VLAN IDs on a Device

This section describes how to enable user traffic statistics collection based on inner or outer VLAN IDs on a device.

(Optional) Configuring VPN Instance-based User Traffic Statistics Collection on a BAS Interface

You can configure a device to collect statistics on user traffic based on VPN instances on a BAS interface.

(Optional) Configuring the Alarm Function on an Interface with No Backup Protection Configured

This section describes how to configure the backup detection interval, number of detections, and minor and major alarm thresholds for the number of users on an interface with no backup protection configured.

Configuring Rules for Obtaining Packet Headers

In case of a user access failure, you can configure rules for obtaining packet headers to locate and diagnose the fault.

Verifying the User management Configuration

After configuring user management, verify the configuration about the username generation mode and domain name parsing function.