
11-1
11
User Profile Configuration
When configuring user profile, go to these sections for information you are interested in:
z
User Profile Overview
z
User Profile Configuration
z
Displaying and Maintaining User Profile
User Profile Overview
User profile provides a configuration template to save predefined configurations. Based on different
application scenarios, you can configure different items for a user profile, such as Committed Access
Rate (CAR), Quality of Service (QoS), and so on.
When accessing the device, users need to be authenticated. During the authentication process, the
authentication server sends the user profile name to the device, which then enables the configurations
in the user profile. After the users pass the authentication and access the device, the device will restrict
the users’ access based on these configurations. When the users log out, the device automatically
disables the configurations in the user profile, and thus the restrictions on the users are removed.
Therefore, user profile is applicable to restricting online users’ access; if no users are online (no user
access, no users pass the authentication, or users have logged out), user profile does not take effect
as it is a predefined configuration.
With user profile, you can:
z
Make use of system resources more granularly. For example, without user profile, you can apply a
QoS policy based on interface, VLAN, globally and so on. This QoS policy is applicable to a group
of users. With user profile, however, you can apply a QoS policy on a per-user basis.
z
Restrict users’ access to the system resources more flexibly. For example, without user profile,
you can perform traffic policing based on CAR, ACL, or for all the traffic of the current interface;
when the physical position of users changes (for example, the users access the network using
another interface), you need to configure traffic policing on another interface. With user profile,
however, you can perform traffic policing on a per-user basis. As long as users are online, the
authentication server applies the corresponding user profile (with CAR configured) to the users;
when the users are offline, the system automatically removes the corresponding configuration.
User Profile Configuration
User Profile Configuration Task List
Task
Remarks
Creating a User Profile
Required
Applying a QoS Policy to User Profile
Required
Enabling a User Profile
Required
Summary of Contents for 4210G Series
Page 459: ...4 8...
Page 493: ...12 1...
Page 968: ...19 6 000f e235 dc71 1 Config static GigabitEthernet 1 0 1 NOAGED 1 mac address es found...