Installation manual

Command Manual - Security
Quidway S3000-EI Series Ethernet Switches
Chapter 2 AAA & RADIUS Protocol Configuration
Commands
Huawei Technologies Proprietary
2-15
View
ISP domain view
Parameter
url-string: The URL address of the page used to change the user password on the
self-service server, a string with 1 to 64 characters. This string cannot contain "?"
character. If "?" is contained in the URL address, you must replace it with "|" when
inputting the URL address in the command line.
Description
Use the self-service-url enable command to configure self-service server URL.
Use the self-service-url disable command to remove the configuration.
By default, self-service server URL is not configured on the switch.
This command must be incorporated with a RADIUS server (such as a CAMS server)
that supports self-service. Self-service means that users can manage their accounts
and card numbers by themselves. And a server with the self-service software is called a
self-service server.
Once this function is enabled on the switch, users can locate the self-service server
and perform self-management through the following operations:
z Select "Change user password" on the 802.1x client.
z After the client opens the default explorer (IE or NetScape), locate the specified
URL page used to change the user password on the self-service server.
z Change user password on this page.
The "Change user password" option is available only after the user passed the
authentication; otherwise, this option is in grey and unavailable.
Example
# In the default ISP domain "system", configure the URL address of the page used to
change the user password on the self-service server to
http://10.153.89.94/selfservice/modPasswd1x.jsp|userName.
[Quidway] domain system
[Quidway-isp-system] self-service-url enable
http://10.153.89.94/selfservice/modPasswd1x.jsp|userName
2.1.16 service-type
Syntax
service-type { ftp [ ftp-directory directory ] | lan-access | { ssh | telnet }* [ level
level ] }
undo service-type { ftp [ ftp-directory ] | lan-access | { ssh | telnet }* [ level ] }