Operation Manual – AAAH3C S3100-52P Ethernet switch Chapter 2 AAA Configuration2-21Note:z Generally, the access users are named in the userid@isp-name or userid.isp-nameformat. Here, isp-name after the “@” or “.” character represents the ISP domainname, by which the device determines which ISP domain a user belongs to.However, some old RADIUS servers cannot accept the usernames that carry ISPdomain names. In this case, it is necessary to remove domain names fromusernames before sending the usernames to RADIUS server. For this reason, theuser-name-format command is designed for you to specify whether or not ISPdomain names are carried in the usernames to be sent to RADIUS server.z For a RADIUS scheme, if you have specified to remove ISP domain names fromusernames, you should not use this RADIUS scheme in more than one ISP domain.Otherwise, such errors may occur: the RADIUS server regards two different usershaving the same name but belonging to different ISP domains as the same user(because the usernames sent to it are the same).z In the default RADIUS scheme "system", ISP domain names are removed fromusernames by default.z The purpose of setting the MAC address format of the Calling-Station-Id (Type 31)field in RADIUS packets is to improve the switch’s compatibility with differentRADIUS servers. This setting is necessary when the format of Calling-Station-Idfield recognizable to RADIUS servers is different from the default MAC addressformat on the switch. For details about field formats recognizable to RADIUSservers, refer to the corresponding RADIUS server manual.2.2.9 Configuring the Local RADIUS ServerThe switch provides the local RADIUS server function (including authentication andauthorization), also known as the local RADIUS server function, in addition to RADIUSclient service, where separate authentication/authorization server and the accountingserver are used for user authentication.
