HP 6125G HP 6125G & 6125G/XG Blade Switches Security Configuration Gui - Page 55
Configuring a NAS ID-VLAN binding, Displaying and maintaining AAA, AAA configuration examples
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 55 highlights
Configuring a NAS ID-VLAN binding The access locations of users can be identified by their access VLANs. In application scenarios where identifying the access locations of users is a must, configure NAS ID-VLAN bindings on the switch. Then, when a user gets online, the switch obtains the NAS ID by the access VLAN of the user and sends the NAS ID to the RADIUS server through the NAS-identifier attribute. To configure a NAS ID-VLAN binding: Step 1. Enter system view. 2. Create a NAS ID profile and enter NAS ID profile view. 3. Configure a NAS ID-VLAN binding. Command system-view aaa nas-id profile profile-name nas-id nas-identifier bind vlan vlan-id Remarks N/A N/A By default, no NAS ID-VLAN binding exists. Displaying and maintaining AAA Task Display the configuration information of ISP domains. Display information about user connections . Command Remarks display domain [ isp-name ] [ | { begin | exclude | include } regular-expression ] Available in any view display connection [ access-type { dot1x | mac-authentication } | domain isp-name | interface interface-type interface-number | ip ip-address | mac mac-address | ucibindex ucib-index | user-name user-name | vlan vlan-id ] [ slot slot-number ] [ | { begin | exclude | include } regular-expression ] Available in any view AAA configuration examples AAA for Telnet users by an HWTACACS server Network requirements As shown in Figure 10, configure the switch to use the HWTACACS server to provide authentication, authorization, and accounting services for Telnet users. Set the shared keys for secure communication with the HWTACACS server to expert. Configure the switch to remove the domain name from a username before sending the username to the HWTACACS server. 45