(Optional) Disabling RADIUS Attributes

You must enable RADIUS attribute translation before disabling RADIUS attributes.

Context

This function is configured for a RADIUS server group and takes effect only on the RADIUS servers in this group. You can disable up to 64 attributes in a RADIUS server group.

You can disable the RADIUS attributes of both the sender and receiver on the NetEngine 8000 F.

Procedure

Run system-view
The system view is displayed.
Run radius-server group group-name
The RADIUS server group view is displayed.
Run radius-server attribute translate
RADIUS attribute translation is enabled.
Run one of the following commands to disable basic or extended RADIUS attributes:
1. Run the radius-attribute disable { attr-description | hw-acct-update-address } { receive | send } ^* command to disable basic RADIUS attributes for request or response packets.
2. Run the radius-attribute disable { attr-description | hw-acct-update-address } { access-request | access-accept | account [ start ] } ^* command to disable basic RADIUS attributes for Access-Accept, Access-Request, or accounting packets.
3. Run the radius-attribute disable extend attr-description { access-request | access-accept | account } ^* command to disable extended RADIUS attributes for Access-Accept, Access-Request, or accounting packets.
4. Run the radius-attribute disable extend vendor-specific src-vendor-id src-sub-attr-id access-accept command to disable extended or user-defined RADIUS attributes for packets.
5. Run the radius-attribute disable { attr-description | hw-acct-update-address } { ip forbid-ip | string forbid-string | bin forbid-bin-value | integer vendor-id } receive command to disable RADIUS attributes with specified data types and carried in response packets.
6. Run the radius-attribute disable { hw-acct-update-address | flow-attributes } integer integer account command to disable RADIUS attributes with specified integral values and carried in accounting packets. The integer parameter can only be set to 0.
  If you specify the flow-attributes parameter in the radius-attribute disable command, the following flow attributes are all disabled: Acct-Input-Octets, Acct-Output-Octets, Acct-Input-Packets, Acct-Output-Packets, Acct-Input-Gigawords, Acct-Output-Gigawords, HW-Acct-IPV6-Input-Octets, HW-Acct-IPV6-Output-Octets, HW-Acct-IPV6-Input-Packets, HW-Acct-IPV6-Output-Packets, HW-Acct-IPV6-Input-Gigawords, and HW-Acct-IPV6-Output-Gigawords.
Run commit
The configuration is committed.