446
Configuring user profiles
Overview
A user profile saves a set of predefined parameters, such as a QoS policy.
The user profile application allows flexible traffic policing on a per-user basis. Each time a user
passes authentication, the device automatically applies the parameters in the user profile to this
user.
The user profile restricts authenticated user behaviors as follows:
1.
After the authentication server verifies a user, the server sends the device the name of the user
profile specified for the user.
2.
The device applies the parameters in the user profile to the user.
3.
When the user logs out, the device automatically removes the user profile parameters.
Configuration task list
Tasks at a glance
(Required.)
(Required.)
Configuring parameters for a user profile
Configuration restrictions and guidelines
Before creating a user profile, perform the following tasks:
1.
Plan the authentication method for your network. The user profile supports working with 802.1X
and MAC authentication.
{
In remote authentication, specify a user profile for each user account on the authentication
server.
{
In local authentication, specify a user profile for each user account in the local user view. For
more information, see "Configuring AAA."
2.
Configure the authentication parameters on the client, the device, and the authentication server.
The parameters include username, password, authentication scheme, and authentication
domain.
Creating a user profile
To create a user profile:
Step Command Remarks
1.
Enter system view.
system-view
N/A
2.
Create a user profile and
enter user profile view.
user-profile
profile-name
You can use the command to
enter the view of an existing user
profile.