Operation Manual – AAA & RADIUS & HWTACACS & EADH3C S7500 Series Ethernet SwitchesChapter 1 AAA & RADIUS & HWTACACSConfiguration1-29Caution:z Generally, the access users are named in the userid@isp-name format. isp-namebehind the @ character represents the ISP domain name, by which the devicedetermines which ISP domain it should ascribe the user to. However, some oldRADIUS servers cannot accept the user names that carry ISP domain names. Inthis case, it is necessary to remove the domain names carried in the user namesbefore sending the user names to the RADIUS server. For this reason, theuser-name-format command is designed for you to specify whether or not ISPdomain names are to be carried in the user names sent to the RADIUS server.z For a RADIUS scheme, if you have specified that no ISP domain names are to becarried in the user names, you should not adopt this RADIUS scheme in more thanone ISP domain. Otherwise, such errors may occur: the RADIUS server regards twodifferent users having the same name but belonging to different ISP domains as thesame user (because the usernames sent to it are the same).z In the default RADIUS scheme system, no ISP domain names are carried in theusernames by default.1.4.9 Configuring a Local RADIUS Authentication ServerTable 1-20 Configure local RADIUS authentication serverTo do... Use the command... RemarksEnter system view system-view —Create a localRADIUSauthenticationserverlocal-server nas-ipip-address keypasswordRequiredBy default, a local RADIUSauthentication server has alreadybeen created, whose NAS-IP is127.0.0.1
