Filter
Top Products
432 CHAPTER 11: MANAGED ACCESS POINT COMMANDS
The SSID default attributes are applied in addition to any attributes supplied
for the user by the RADIUS server or the local database. When the same
attribute is specified both as an SSID default attribute and through AAA,
then the attribute supplied by the RADIUS server or the local database
takes precedence over the SSID default attribute. If a location policy is
configured, the location policy rules also take precedence over SSID default
attributes. The SSID default attributes serve as a fallback when neither the
AAA process, nor a location policy, provides them.
For example, a service profile might be configured with the service-type
attribute set to 2. If a user accessing the SSID is authenticated by a
RADIUS server, and the RADIUS server returns the vlan-name attribute
set to orange, then that user will have a total of two attributes set:
service-type and vlan-name.
If the service profile is configured with the vlan-name attribute set to
blue, and the RADIUS server returns the vlan-name attribute set to
orange, then the attribute from the RADIUS server takes precedence; the
user is placed in the orange VLAN.
You can display the attributes for each connected user and whether they
are set through AAA or through SSID defaults by entering the display
sessions network verbose command. You can display the configured
SSID defaults by entering the display service-profile command.
Examples — The following command assigns users accessing the SSID
managed by service profile sp2 to VLAN blue:
WX4400# set service-prof sp2 attr vlan-name blue
success: change accepted.
The following command assigns users accessing the SSID managed by
service profile sp2 to the Mobility Profile tulip.
WX4400# set service-prof sp2 attr mobility-profile tulip
success: change accepted.
The following command limits the days and times when users accessing
the SSID managed by service profile sp2 can access the network, to 5
p.m. to 2 a.m. every weekday, and all day Saturday and Sunday:
WX1200# set service-prof sp2 attr time-of-day
Wk1700-0200,Sa,Su
success: change accepted.