1-21To do… Use the command… RemarksConfigure a NAS ID-VLANbindingnas-id nas-identifier bind vlanvlan-idRequiredBy default, no NAS ID-VLANbinding exists.Displaying and Maintaining AAATo do… Use the command… RemarksDisplay the configuration informationof a specified ISP domain or all ISPdomainsdisplay domain [ isp-name ] Available in any viewDisplay information about specifiedor all user connectionsdisplay connection [ domainisp-name | ucibindex ucib-index |user-name user-name ]Available in any viewDisplay information about specifiedor all local usersdisplay local-user [ service-type{ ftp | ssh | telnet | terminal } | state{ active | block } | user-nameuser-name | vlan vlan-id ]Available in any viewDisplay configuration informationabout a specified user group or alluser groupsdisplay user-group [ group-name ] Available in any viewConfiguring RADIUSThe RADIUS protocol is configured on a per scheme basis. After creating a RADIUS scheme, you needto configure the IP addresses and UDP ports of the RADIUS servers for the scheme. The serversinclude authentication/authorization servers and accounting servers, or primary servers and secondaryservers. In other words, the attributes of a RADIUS scheme mainly include IP addresses of primary andsecondary servers, shared key, and RADIUS server type.Actually, the RADIUS protocol configurations only set the parameters necessary for the informationinteraction between a NAS and a RADIUS server. For these settings to take effect, you must referencethe RADIUS scheme containing those settings in ISP domain view. For information about thecommands for referencing a scheme, refer to Configuring AAA.When there are users online, you cannot modify RADIUS parameters other than the retransmissionones and the timers.Creating a RADIUS SchemeBefore performing other RADIUS configurations, follow these steps to create a RADIUS scheme andenter RADIUS scheme view:
