How does MA5200G define the format of NAS-PORT attribute?
NAS-PORT attribute is one important Radius attribute of physical position of user access and the type is INTEGER. Different enterprises have different definition of detailed format. When it connects with Radius server of different enterprises, the attribute may not match the format.
2323 version of MA5200G starts to support detailed format of self-defined NAS-PORT attribute and the realization is as follows.
Under Radius-Server Group view:
radius-server format-attribute nas-port <format string >
format string: String<1~32>
If Radius-Server Group configures format string with NAS-Port attribute, it will encapsulate NAS-Port attribute according to format string when Radius-Server Group is used to authenticate.
The format and explanation of format string are as follows:
1. Keyword: s, t, p, o, i mean slot, subslot, port, outer-vlan (QinqVlan)/vpi, inner-vlan (User-Vlan)/vci. n and z is to fill. N means the following digits is to fill 1. z means 0.
2. The following part of stpoi must be 0-9 and the value must be 1~32. Each keyword can occur once.
3. n and z can occur several times. The following part of n and z can be number or o/i. If it is followed by number, the position is to fill 12-bit 1/0. If n and z are followed by o/i, it is for Ethernet interface. If there is no external VLAN/no VLAN, the position is to fill 1(n) or 0 (z).
4. The digits of string must be equal to 32-bit.
Enable NAS-Port under Radius-Server Group with undo command.
Under default NAS-Port under Radius-Server Group is null. It cannot be enabled.
[Quidway-radius-rdgoup1] radius-server format-attribute nas-port s4t2p4no10i12
The command above means NAS-Port attribute is encapsulated according to the following order and digit: Slot occupies 4-bit, SubSlot 2-bit, Port 4-bit, vpi/QinqVlan10-bit (If there is no external VLAN, it encapsulate 10-bit 1), vci/UserVlan 12-bit (If there is no VLAN, 0 fills 12-bit.).
The function greatly strengthens the compatibility of MA5200G device.