Specifications
8-50 AAA Commands
set mac-usergroup attr
CreatesausergroupinthelocaldatabaseontheRASforuserswhoareauthenticatedbyaMAC
address,andassignsauthorizationattributesforthegroup.
(ToconfigureausergroupandassignauthorizationattributesthroughRADIUS,seethe
documentationforyourRADIUSserver.)
Syntax
set mac-usergroup group-name attr attribute-name value
Parameters
Default
None.
Mode
Enabled.
Usage
Tochangethevalueofanattribute,entersetmac‐usergroupattrwiththenewvalue.Todeletean
attribute,useclearmac‐usergroupattr.
YoucanassignattributestoindividualMACusersandtoMACusergroups.Ifattributesare
configuredforaMACuserandalsoforthegroup
theMACuserisin,theattributesassignedto
theindividualMACusertakeprecedenceforthatuser.Forexample,ifthestart‐dateattribute
configuredforaMACuserissoonerthanthestart‐dateconfiguredfortheMACusergroupthe
userisin,theMACuser’snetwork
accesscanbeginassoonastheuserstart‐date.TheMACuser
doesnotneedtowaitfortheMACusergroup’sstartdate.
Example
ThefollowingcommandcreatestheMACusergroupeastcoastersandassignsthegroupmembers
toVLANorange:
RBT-8100# set mac-usergroup eastcoasters attr vlan-name orange
success: change accepted.
group‐name NameofaMACusergroup.Specifyanameofupto32 alphanumeric
characters,withnospaces.Thenamemustbeginwithanalphabetic
character.
attribute‐name
value
Nameandvalueofanattributeyouareusing toauthorizeallMACusersin
thegroupforaparticularserviceor
sessioncharacteristic.(Foralistof
authorizationattributes,seeTable 8‐1onpage 8‐45.)