System information

152
DWS-1008 CLI Reference Guide
D-Link Systems, Inc.
AAA Commands
Defaults: No default Mobility Profile exists on the DWS-1008 switch. If you do not assign
Mobility Profile attributes, all users have access through all ports, unless denied
access by other AAA servers or by access control lists (ACLs).
Access: Enabled.
Usage: To assign a Mobility Profile to a user or group, specify it as an authorization attribute
in one of the following commands:
• set user attr mobility-profile name
• set usergroup attr mobility-profile name
• set mac-user attr mobility-profile name
• set mac-usergroup attr mobility-profile name
To enable the use of the Mobility Profile feature on the switch, use the set mobility-profile
mode command.
Caution: When the Mobility Profile feature is enabled, a user is denied access if
assigned a Mobility-Profile attribute in the local switch database or RADIUS server when
no Mobility Profile of that name exists on the switch. To change the ports in a profile, use
set mobility-profile again with the updated port list.
Examples: The following commands create the Mobility Profile magnolia, which restricts
user access to port 5; enable the Mobility Profile feature on the switch; and assign
the magnolia Mobility Profile to user Jose.
DWS-1008# set mobility-profile name magnolia port 5
success: change accepted.
DWS-1008# set mobility-profile mode enable success: change accepted.
DWS-1008# set user Jose attr mobility-profile magnolia success: change accepted.
The following command adds port 4 to the magnolia Mobility Profile (which is already assigned
to port 5):
DWS-1008# set mobility-profile name magnolia port 4-5
success: change accepted.
set mobility-profile mode
Enables or disables the Mobility Profile feature on the switch.
Caution: When the Mobility Profile feature is enabled, a user is denied access if assigned
a Mobility-Profile attribute in the local switch database or RADIUS server when no Mobility
Profile of that name exists on the switch.
Syntax: set mobility-profile mode {enable | disable}