< Home

interface (RADIUS SSO view)

Function

The interface command configures the interface to receive RADIUS charging packets with destination ports 1813 and 1646 in RADIUS SSO.

The undo interface command deletes the interface to receive RADIUS charging packets in RADIUS SSO.

Format

interface interface-type interface-number

undo interface interface-type interface-number

Parameters

Parameter Description Value
interface-type interface-number Specifies the interface type and number. The interface type and number of GE or Eth-Trunk interface.

Views

RADIUS SSO view

Default Level

2: Configuration level

Usage Guidelines

The interface is not specified by default.

The device implements RADIUS SSO based on operations after precise resolving of RADIUS charging packets, including creating, maintaining, and logging out online users. If an illegitimate user forges RADIUS charging start packets and sends the packets to the device, the device considers the illegitimate user as an online user. The user can access Internet resources without RADIUS authentication. Therefore, you must specify an interface on the device to receive RADIUS charging packets in RADIUS SSO to avoid this issue.

The device supports a maximum of eight interfaces that receive RADIUS charging packets from optical splitters.

The interface can be a Layer-2 physical interface, Layer-3 physical interface, subinterface of a Layer-2 or Layer-3 physical interface, Layer-2 Eth-Trunk interface, Layer-3 Eth-Trunk interface, or subinterface of a Layer-2 or layer-3 Eth-Trunk interface.

Management port (MEth 0/0/0 or GigabitEthernet 0/0/0) cannot receive mirroring packets.

In mirroring mode, interfaces can receive only RADIUS packets and discard other packets.

In in-path and out-of-path modes, interfaces can receive RADIUS packets and forward other packets.

Example

# Set the interface on the device to receive RADIUS charging packets in RADIUS SSO to GigabitEthernet 0/0/1.

<sysname> system-view
[sysname] user-manage single-sign-on radius
[sysname-sso-radius] interface GigabitEthernet 0/0/1
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >