H3C S5120-EI Series, Руководство по эксплуатации

Страница: 508 / 1191

1-1
1
User Profile Configuration
When configuring user profile, go to these sections for information you are interested in:
z
User Profile Overview
z
User Profile Configuration
z
Displaying and Maintaining User Profile
User Profile Overview
User profile provides a configuration template to save predefined configurations. Based on different
application scenarios, you can configure different items for a user profile, such as Committed Access
Rate (CAR), Quality of Service (QoS), and so on.
When accessing the device, users need to be authenticated. During the authentication process, the
authentication server sends the user profile name to the device, which then enables the configurations
in the user profile. After the users pass the authentication and access the device, the device will restrict
the users’ access based on these configurations. When the users log out, the device automatically
disables the configurations in the user profile, and thus the restrictions on the users are removed.
Therefore, user profile is applicable to restricting online users’ access; if no users are online (no user
access, no users pass the authentication, or users have logged out), user profile does not take effect as
it is a predefined configuration.
With user profile, you can:
z
Make use of system resources more granularly. For example, without user profile, you can apply a
QoS policy based on interface, VLAN, globally and so on. This QoS policy is applicable to a group
of users. With user profile, however, you can apply a QoS policy on a per-user basis.
z
Restrict users’ access to the system resources more flexibly. For example, without user profile, you
can perform traffic policing based on CAR, ACL, or for all the traffic of the current interface; when
the physical position of users changes (for example, the users access the network using another
interface), you need to configure traffic policing on another interface. With user profile, however,
you can perform traffic policing on a per-user basis. As long as users are online, the authentication
server applies the corresponding user profile (with CAR configured) to the users; when the users
are offline, the system automatically removes the corresponding configuration.
User Profile Configuration
User Profile Configuration Task List
Task Remarks
Creating a User Profile Required
Applying a QoS Policy to User Profile Required
Enabling a User Profile Required