NE 20 - IP POOL BASED ON RADIUS / Authentican without domain

Created: Jul 13, 2019 22:02:09Latest reply: Jul 19, 2019 16:46:51 283 18 1 0
  Rewarded Hi-coins: 0 (problem resolved)

Hello,


I need to set up a ip pool so that the ip is delivered by a Radius server. Do you know how to perform this configuration on NE20?


Another question: by default Huaweii products use user@domain in order to grant access to its users. Is it possible to remove @domain when authenticating users?

Best regards

  • x
  • convention:

Featured Answers
Admin Created Jul 16, 2019 08:45:36 Helpful(0) Helpful(0)

  • x
  • convention:

Admin Created Jul 13, 2019 22:35:40 Helpful(1) Helpful(1)

@mrod Hi,
To create a ip pool, please refer to http://support.huawei.com/hedex/ ... 5252529&lang=en

Yes, you are able to remove the domain field when sending the username to the RADIUS server.
please excute command undo radius-server user-name domain-include to cancel the domain field included.
  • x
  • convention:

All Answers
chenhui Admin Created Jul 13, 2019 22:35:40 Helpful(1) Helpful(1)

@mrod Hi,
To create a ip pool, please refer to http://support.huawei.com/hedex/ ... 5252529&lang=en

Yes, you are able to remove the domain field when sending the username to the RADIUS server.
please excute command undo radius-server user-name domain-include to cancel the domain field included.
  • x
  • convention:

LuizPuppin MVE Created Jul 13, 2019 22:41:08 Helpful(0) Helpful(0)

If you are using PPPoE you don't need to create a pool to be delivered by Radius. You only need to send a FRAMED-IP=xx.xx.xx.xx parameter and NE20 will apply to client during connection.

If you are using any dynamic routing protocol, you need to use import-route unr to advertise this IP sent by radius.
  • x
  • convention:

mrod Created Jul 13, 2019 22:53:00 Helpful(0) Helpful(0)

Hi Lu@LuizPuppin , and how do I set up the router to send that frame?
  • x
  • convention:

mrod Created Jul 13, 2019 22:54:41 Helpful(0) Helpful(0)

@chenhui , do I have to set up a dynamic pool in order to let the Radius Server deliver Ip address?
  • x
  • convention:

LuizPuppin MVE Created Jul 13, 2019 23:13:52 Helpful(0) Helpful(0)

Posted by mrod at 2019-07-13 11:53Hi Lu@LuizPuppin , and how do I set up the router to send that frame?

You need to configure your Radius Server to send the parameter Framed-IP-Address (8) with the IP address to the client. You use this parameter if you need to specify a fixed IP to a client.
If you don't need a fixed IP, you only configure a ip-pool like our friend @chenhui sent before.
  • x
  • convention:

mrod Created Jul 15, 2019 19:17:40 Helpful(0) Helpful(0)

Posted by LuizPuppin at 2019-07-13 23:13 Posted by mrod at 2019-07-13 23:13Hi Lu@LuizPuppin , and how do I set up the router to send that fram ...
Could you please give me an example how to configure a ip pool to that purpose? Because if I choose a local pool address will me given by the router itself, and I need my Radius handling this process.
  • x
  • convention:

mrod Created Jul 15, 2019 20:47:14 Helpful(0) Helpful(0)

Posted by chenhui at 2019-07-13 22:35 @mrod Hi,To create a ip pool, please refer to http://support.huawei.com/hedex/hdx.do?docid=EDOC11000 ...
The command undo ndo radius-server user-name domain-include did not work. Do you have any other suggestion?
  • x
  • convention:

mrod Created Jul 16, 2019 02:23:32 Helpful(0) Helpful(0)

Posted by mrod at 2019-07-15 20:47 The command undo ndo radius-server user-name domain-include did not work. Do you have any other su ...
What about DNS. Do I have to do something special in order to allow Radius server to inform what is the correct DNS server to use?
  • x
  • convention:

mrod Created Jul 16, 2019 03:10:50 Helpful(0) Helpful(0)

Posted by LuizPuppin at 2019-07-13 23:13 Posted by mrod at 2019-07-13 23:13Hi Lu@LuizPuppin , and how do I set up the router to send that fram ...
It worked just fine, but something new happened: I found out that my Radius server doesn't deliver DNS server information to users;
Do you have any suggestion on how to solve this problem? I tried to specify DNS IP on IP pool and nothing else but it didn't work.
  • x
  • convention:

12
Back to list

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!

Login and enjoy all the member benefits

Login
Fast reply Scroll to top