Specifications

8-48 AAA Commands
Example
Thefollowingcommandassignsinputaccesscontrollist(ACL)acl‐03tofilterthepacketsfroma
useratMACaddress01:02:03:04:05:06:
RBT-8100# set mac-user 01:02:03:04:05:06 attr filter-id acl-03.in
success: change accepted.
ThefollowingcommandrestrictsauseratMACaddress06:05:04:03:02 :01tonetworkaccess
between7p.m.onMondaysandWednesdaysand7a.m.onTuesdaysandThursdays:
RBT-8100# set mac-user 06:05:04:03:02:01 attr time-of-day mo1900-
1159,tu0000-0700,we1900-1159,th0000-0700
url
(network access
mode only)
URL to which the user is redirected
after successful WebAAA.
Web URL, in standard format. For example:
http://www.example.com
Note: You must include the http:// portion.
Youcandynami callyincludeanyofthe
variablesintheURLstring:
• $u—Username
• $v—VLAN
• $s—SSID
• $p—Service profile name
To use the literal character $ or ?, use the
following:
• $$
• $q
vlan-name
(network access
mode only)
Virtual LAN (VLAN) assignment.
Note: VLAN-Name is an
Enterasys Networks vendor-
specific attribute (VSA). The vendor
ID is 14525, and the vendor type is
1.
Note: On some RADIUS servers,
you might need to use the standard
RADIUS attribute Tunnel-Pvt-
Group-ID, instead of VLAN-Name.
Name of a VLAN that you want the user to use.
The VLAN must be configured on a RAS within
the Mobility Domain to which this RAS belongs.
acct‐interim‐
interval
Intervalinsecondsbetween
accountingupdates,ifstart‐
stopaccountingmodeis
enabled.
Numberbetween180and3,600seconds,or
0todisableperiodicaccountingupdates.
TheRoamAboutSwitchignorestheacct‐
interim‐intervalvalueandissuesalog
messageifthevalueisbelow60seconds.
Ifbotha
RADIUSserverandthe
RoamAboutSwitchsupplyavalueforthe
acct‐interim‐intervalattribute,thenthe
valuefromtheRoamAboutSwitchtakes
precedence.
Table 8-1 Authentication Attributes for Local Users (continued)
Attribute Description Valid Value(s)