mode (RADIUS SSO view)

Function

The mode command configures the working mode of RADIUS SSO, that is, the way the FW obtains charging packets.

Format

mode { in-path | out-of-path | optical-splitter }

Parameters

Parameter	Description	Value
in-path	Indicates that RADIUS SSO works in in-line mode. The FW is deployed between the NAS and RADIUS server to obtain the charging packets exchanged in between.	-
out-of-path	Indicates that RADIUS SSO works in off-line mode. The FW connects to the NAS in off-line mode to receive charging packets sent by the NAS. In this mode, the NAS needs to be able to send charging packets to the FW.	-
optical-splitter	Indicates that RADIUS SSO works in optical-splitting (mirroring) mode. The FW can obtain only charging packets mirrored by switches or split by optical splitters.	-

Parameter

Description

Value

in-path

Indicates that RADIUS SSO works in in-line mode. The FW is deployed between the NAS and RADIUS server to obtain the charging packets exchanged in between.

out-of-path

Indicates that RADIUS SSO works in off-line mode. The FW connects to the NAS in off-line mode to receive charging packets sent by the NAS.

In this mode, the NAS needs to be able to send charging packets to the FW.

optical-splitter

Indicates that RADIUS SSO works in optical-splitting (mirroring) mode. The FW can obtain only charging packets mirrored by switches or split by optical splitters.

Views

RADIUS SSO view

Default Level

2: Configuration level

Usage Guidelines

The default working mode of RADIUS SSO is out-of-path.

The FW analyzes charging packets to obtain the mapping between users and IP address and bring the users online. The deployment place of the FW determines the method for obtaining charging packets.

The FW processes received RADIUS charging packets differently based on the deployment mode:

in-path: resolves and forwards the packets.
out-of-path: resolves and replies to the packets.
optical-splitter: resolves and discards the packets.

Example

# Configure RADIUS SSO to work in optical-splitter mode.

<sysname> system-view
[sysname] user-manage single-sign-on radius
[sysname-sso-radius] mode optical-splitter