Operation Manual – AAA & RADIUS & HWTACACS & EADH3C S7500 Series Ethernet SwitchesChapter 1 AAA & RADIUS & HWTACACSConfiguration1-19Caution:z In string mode, if the VLAN ID assigned by the RADIUS server is a character stringcontaining only digits (for example, 1024), the switch first regards it as an integerVLAN ID: the switch transforms the string to an integer value and determines if thevalue is in the valid VLAN ID range; if it is, the switch adds the authenticated port tothe VLAN with the integer value as the VLAN ID (VLAN 1024, for example).z To implement dynamic VLAN assignment on a port enabled with both MSTP and802.1x, make sure you configure the MSTP port as an edge port.1.3.6 Configuring the Attributes of a Local UserWhen local scheme is chosen as the AAA scheme, you should create local users onthe switch and configure the related attributes.Local users are users set on the switch, with each user uniquely identified by a username. To make a user who is requesting network service pass through the localauthentication, you should add an entry in the local user database on the switch for theuser.Table 1-10 Configure the attributes of a local userTo do... Use the command... RemarksEnter system view system-view —Set the password displaymode of all local userslocal-userpassword-display-mode{ cipher-force | auto }OptionalBy default, the passworddisplay mode of all accessusers is auto, indicatingthe passwords of accessusers are displayed in themodes set with thepassword command.Add a local user and enterlocal user view local-user user-nameRequiredBy default, there is nolocal user in the system.Set a password for thespecified userpassword { simple |cipher } password OptionalSet the state of thespecified user state { active | block }OptionalBy default, the local usersare in the active stateonce they are created,that is, they are allowed torequest network services.
