2-9z The following characters are not allowed in the user-name string: /:*?<>. And you cannot inputmore than one “@” in the string.z After the local-user password-display-mode cipher-force command is executed, any passwordwill be displayed in cipher mode even though you specify to display a user password in plain text byusing the password command.z If a username and password is required for user authentication (RADIUS authentication as well aslocal authentication), the command level that a user can access after login is determined by theprivilege level of the user. For SSH users using RSA shared key for authentication, the commandsthey can access are determined by the levels set on their user interfaces.z If the configured authentication method is none or password authentication, the command levelthat a user can access after login is determined by the level of the user interface.z If the clients connected to a port have different authorized VLANs, only the first client passing theMAC address authentication can be assigned with an authorized VLAN. The switch will not assignauthorized VLANs for subsequent users passing MAC address authentication. In this case, you arerecommended to connect only one MAC address authentication user or multiple users with thesame authorized VLAN to a port.z For local RADIUS authentication to take effect, the VLAN assignment mode must be set to stringafter you specify authorized VLANs for local users.Cutting Down User Connections ForciblyFollow these steps to cut down user connections forcibly:To do… Use the command… RemarksEnter system view system-view —Cut down user connectionsforciblycut connection { all | access-type { dot1x |mac-authentication } | domain isp-name |interface interface-type interface-number | ipip-address | mac mac-address |radius-scheme radius-scheme-name | vlanvlan-id | ucibindex ucib-index | user-nameuser-name }RequiredYou can use the display connection command to view the connections of Telnet users, but you cannotuse the cut connection command to cut down their connections.RADIUS Configuration Task ListH3C’s Ethernet switches can function not only as RADIUS clients but also as local RADIUS servers.Complete the following tasks to configure RADIUS (the switch functions as a RADIUS client):
