Applying A Nas-Id Profile To An Interface - HP FlexNetwork 10500 Series Security Configuration Manual

Step
2. Enter VLAN interface
view.
3. Configure BAS-IP for IPv4
portal packets sent to the
portal authentication
server.
4. Configure BAS-IPv6 for
IPv6 portal packets sent
to the portal
authentication server.

Applying a NAS-ID profile to an interface

By default, the device sends its device name in the NAS-Identifier attribute of all RADIUS requests.
A NAS-ID profile enables you to send different NAS-Identifier attribute strings in RADIUS requests
from different VLANs. The strings can be organization names, service names, or any user
categorization criteria, depending on the administrative requirements.
For example, map the NAS-ID companyA to all VLANs of company A. The device will send
companyA in the NAS-Identifier attribute for the RADIUS server to identify requests from any
Company A users.
You can apply a NAS-ID profile to a portal-enabled interface. If no NAS-ID profile is specified on the
interface or no matching NAS-ID is found in the specified profile, the device uses the device name as
the interface NAS-ID.
To apply a NAS-ID profile to an interface:
Step
1. Enter system view.
2. Create a NAS-ID profile and
enter NAS-ID profile view.
3. Configure a NAS ID and
VLAN binding in the profile.
4. Return to system view.
5. Enter VLAN interface view.
6. Specify the NAS-ID profile
on the interface.
Command
interface interface-type
interface-number
portal bas-ip ipv4-address
portal bas-ipv6 ipv6-address
Command
system-view
aaa nas-id profile profile-name
nas-id nas-identifier bind vlan
vlan-id
quit
interface interface-type
interface-number
portal nas-id-profile
profile-name
152
Remarks
N/A
By default, the BAS-IP attribute of an
IPv4 portal reply packet sent to the
portal authentication server is the
source IPv4 address of the packet. The
BAS-IP attribute of an IPv4 portal
notification packet sent to the portal
authentication server is the IPv4
address of the packet's output interface.
By default, the BAS-IPv6 attribute of an
IPv6 portal reply packet sent to the
portal authentication server is the
source IPv6 address of the packet. The
BAS-IPv6 attribute of an IPv6 portal
notification packet sent to the portal
authentication server is the IPv6
address of the packet's output interface.
Remarks
N/A
For more information about this
command, see Security
Command Reference.
For more information about this
command, see Security
Command Reference.
N/A
N/A
By default, no NAS-ID profile is
specified on the interface.