Filter
Top Products
set mac-user attr 263
filter-id Inbound or outbound
ACL to apply to the
user.
If configured in the WX local database,
this attribute can be an access control
list (ACL) to filter outbound or inbound
traffic. Use the following format:
filter-id inboundacl.in
or
filter-id outboundacl.out
If you are configuring the attribute on a
RADIUS server, the value field of filter-id
can specify up to two ACLs. Any of the
following are valid:
filter-id = "Profile=acl1"
filter-id = "OutboundACL=acl2"
filter-id = "Profile=acl1
OutboundACL=acl2"
(Each example goes on a single line on
the server.) The format in which to
specify the values depends on the
RADIUS server.
Regardless of whether the attributes
are defined locally or on a RADIUS
server, the ACLs must already be
configured on the WX.
idle-timeout This option is not implemented in the current MSS version.
mobility-profile
(network access
mode only)
Mobility Profile attribute
for the user. (For more
information, see set
mobility-profile on
page 269.)
Name of an existing Mobility Profile, up
to 32 alphanumeric characters, with no
tabs or spaces.
Note: If the Mobility Profile feature is
enabled, and a user is assigned a
Mobility Profile name that does not
exist on the WX, the user is denied
access.
Table 44 Authentication Attributes for Local Users (continued)