3Com 3CRWX120695A, Configuration Manual

Page: 489 / 728

Assigning Authorization Attributes 489
end-date Date and time after
which the user is no
longer allowed to be
on the network. Date and time, in the following
format:
YY/MM/DD-HH:MM
You can use end-date alone or with
start-date . You also can use
start-date , end-date , or both in
conjunction with time-of-day .
filter-id
(network access
mode only)
Security access control
list (ACL), to permit or
deny traffic received
(input) or sent (output)
by the WX switch.
(For more information
about security ACLs,
see Chapter 19,
“Configuring and
Managing Security
ACLs,” on page 377.)
Name of an existing security ACL, up
to 32 alphanumeric characters, with
no tabs or spaces.
„
Use acl-name .in to filter traffic that
enters the switch from users via a
MAP access port or wired
authentication port, or from the
network via a network port.
„
Use acl-name .out to filter traffic
sent from the switch to users via a
MAP access port or wired
authentication port, or from the
network via a network port.
If the Filter-Id value returned through
the authentication and authorization
process does not match the name of a
committed security ACL in the WX, the
user fails authorization and is unable
to authenticate.
idle-timeout This option is not implemented in the current MSS version.
mobility-profile
(network access
mode only)
Mobility Profile
attribute for the user.
(For more information,
see “Configuring a
Mobility Profile” on
page 510.) Name of an existing Mobility Profile,
which can be up to 32 alphanumeric
characters, with no tabs or spaces.
Note: If the Mobility Profile feature is
enabled, and a user is assigned the
name of a Mobility Profile that does
not exist on the WX switch, the user is
denied access.
Table 43 Authentication Attributes for Local Users (continued)
Attribute Description Valid Value(s)