82
A local user can play only one role at a moment. If you perform the role configuration repeatedly, only
the last role configuration takes effect.
Examples
# Configure the authorized VLAN of local user
abc
as VLAN 2.
<Sysname> system-view
[Sysname] local-user abc
[Sysname-luser-abc] authorization-attribute vlan 2
# Configure the authorized VLAN of user group
abc
as VLAN 3.
<Sysname> system-view
[Sysname] user-group abc
[Sysname-ugroup-abc] authorization-attribute vlan 3
bind-attribute
Syntax
bind-attribute
{
call-number
call-number
[
:
subcall-number
] |
ip
ip-address
|
location
port
slot-number
subslot-number port-number
|
mac
mac-address
|
vlan
vlan-id
} *
undo bind-attribute
{
call-number
|
ip
|
location
|
mac
|
vlan
} *
View
Local user view
Default level
3: Manage level
Parameters
call-number
call-number
: Specifies a calling number for ISDN user authentication. The
call-number
argument is a string of 1 to 64 characters. This option is applicable to only PPP users.
subcall-number
: Specifies the sub-calling number. The total length of the calling number and the
sub-calling number cannot be more than 62 characters.
ip
ip-address
: Specifies the IP address of the user. This option is applicable to only 802.1X users.
location
port
slot-number subslot-number port-number
: Specifies the port to which the user is bound. The
slot-number
argument is in the range 0 to 255, the
subslot-number
argument is in the range 0 to 15, and
the
port-number
argument is in the range 0 to 255. This option is applicable to only LAN users.
mac
mac-address
: Specifies the MAC address of the user in the format H-H-H. This option is applicable
to only LAN users.
vlan
vlan-id
: Specifies the VLAN to which the user belongs. The
vlan-id
argument is in the range 1 to
4094. This option is applicable to only LAN users.
Description
Use the
bind-attribute
command to configure binding attributes for a local user.
Use the
undo bind-attribute
command to remove binding attributes of a local user.
By default, no binding attribute is configured for a local user.
Binding attributes are checked upon authentication of a local user. If the binding attributes of a local user
do not match the configured ones, the user fails the checking and the authentication.
