Filter
Top Products
set mac-usergroup attr 267
You can assign attributes to individual MAC users and to MAC user
groups. If attributes are configured for a MAC user and also for the group
the MAC user is in, the attributes assigned to the individual MAC user
take precedence for that user. For example, if the start-date attribute
configured for a MAC user is sooner than the start-date configured for
the MAC user group the user is in, the MAC user’s network access can
begin as soon as the user start-date. The MAC user does not need to wait
for the MAC user group’s start date.
Examples — The following command assigns input access control list
(ACL) acl-03 to filter packets from a user at MAC address
01:02:03:04:05:06:
WX4400# set mac-user 01:02:03:04:05:06 attr filter-id
acl-03.in
success: change accepted.
The following command restricts a user at MAC address
06:05:04:03:02:01 to network access between 7 p.m. on Mondays and
Wednesdays and 7 a.m. on Tuesdays and Thursdays:
WX4400# set mac-user 06:05:04:03:02:01 attr time-of-day
mo1900-1159,tu0000-0700,we1900-1159,th0000-0700
success: change accepted.
See Also
clear mac-user attr on page 221
display aaa on page 229
set mac-usergroup
attr
Creates a user group in the local database on the WX for users
authenticated by a MAC address, and assigns authorization attributes for
the group.
(To configure a user group and assign authorization attributes through
RADIUS, see the documentation for your RADIUS server.)
Syntax —
set mac-usergroup
group-name attr attribute-name value
group-name — Name of a MAC user group. Specify a name of up to
32 alphanumeric characters, with no spaces.