38
[Sysname] local-user abc
[Sysname-luser-abc] authorization-attribute vlan 2
# Configure the authorized VLAN of user group
abc
as VLAN 3.
<Sysname> system-view
[Sysname] user-group abc
[Sysname-ugroup-abc] authorization-attribute vlan 3
bind-attribute
Use
bind-attribute
to configure binding attributes for a local user.
Use
undo bind-attribute
to remove binding attributes of a local user.
Syntax
bind-attribute
{
call-number
call-number
[
:
subcall-number
] |
ip
ip-address
|
location
port
slot-number subslot-number port-number
|
mac
mac-address
|
vlan
vlan-id
} *
undo bind-attribute
{
call-number
|
ip
|
location
|
mac
|
vlan
} *
Default
No binding attribute is configured for a local user.
Views
Local user view
Default command level
3: Manage level
Parameters
call-number
call-number
: Specifies a calling number for ISDN user authentication. The
call-number
argument is a string of 1 to 64 characters. This option applies only to PPP users.
subcall-number
: Specifies the sub-calling number. The total length of the calling number and the
sub-calling number cannot be more than 62 characters.
ip
ip-address
: Specifies the IP address of the user.
location
port
slot-number subslot-number port-number
: Specifies the port to which the user is
bound. The
slot-number
argument ranges from 0 to 255, the
subslot-number
argument ranges from
0 to 15, and the
port-number
argument ranges from 0 to 255.
mac
mac-address
: Specifies the MAC address of the user in the format H-H-H.
vlan
vlan-id
: Specifies the VLAN to which the user belongs. The
vlan-id
argument ranges from 1 to
4094.
Usage guidelines
Binding attributes are checked upon authentication of a local user. If the binding attributes of a local
user do not match the configured ones, the user fails checking and authentication.
Binding attribute checking does not take the service types of users into account. A configured binding
attribute is effective for all types of users. Configure binding attributes for different types of local
users with caution. For example, an IP address binding applies only to 802.1X authentication that
supports IP address upload. If the authentication method such as MAC authentication does not
support IP address upload, do not configure an IP address binding for the authentication method.
Otherwise, local authentication fails.
Examples
# Configure the bound IP of local user
abc
as 3.3.3.3.
<Sysname> system-view
