No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40E V800R010C10SPC500 Configuration Guide - User Access 01

This is NE40E V800R010C10SPC500 Configuration Guide - User Access
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
(Optional) Configuring RADIUS Attribute Translation

(Optional) Configuring RADIUS Attribute Translation

The NE40E can communicate with RADIUS servers from different vendors through the RADIUS attribute translation function.

Context

RADIUS servers from various vendors support different RADIUS attributes, and the vendors also define RADIUS attributes in different manners. This makes interconnection between the NE40E and RADIUS servers more difficult.

To address this problem, the NE40E provides the attribute translation function. After the attribute translation function is configured, the NE40E can encapsulate or parse src-attribute by using the format of dest-attribute when transmitting or receiving RADIUS packets. By doing this, the NE40E can communicate with different types of RADIUS servers.

This function is applied when one attribute has multiple formats. For example, the nas-port-id attribute has a new format and an old format. The NE40E uses the new format. If the RADIUS server uses the old format, you can run the radius-attribute translate nas-port-id nas-port-identify-old receive send command on the NE40E. Perform the following steps on the router:

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run radius-server group group-name

    The RADIUS server group view is displayed.

  3. Run radius-server attribute translate

    RADIUS attribute translation is enabled.

  4. Perform any of the following operations to configure RADIUS attribute translation:
    1. Run the radius-attribute translate src-attr-description dest-attr-description { { receive | send } * } command to configure RADIUS attribute translation for request or response packets.
    2. Run the radius-attribute translate src-attr-description dest-attr-description { access-accept | { access-request | account }* } command to configure RADIUS attribute translation for Access-Accept, Access-Request, or accounting packets.
    3. Run the radius-attribute translate extend src-attr-description dest-attr-description { access-accept | { access-request | account} * } command to configure extended RADIUS attribute translation for Access-Request or accounting packets.
    4. Run the radius-attribute translate extend src-attr-description vendor-specific src-vendor-id src-sub-attr-id { access-request | account } * command to configure vendor-specific extended RADIUS attribute translation for Access-Request or accounting packets.
    5. Run the radius-attribute translate extend vendor-specific src-vendor-id src-sub-attr-id dest-attr-description access-accept command to configure vendor-specific extended RADIUS attribute translation for Access-Accept packets.
Translation
Download
Updated: 2019-01-03

Document ID: EDOC1100055031

Views: 17146

Downloads: 69

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next