Specifications

8-50 AAA Commands
set mac-usergroup attr
CreatesausergroupinthelocaldatabaseontheRASforuserswhoareauthenticatedbyaMAC
address,andassignsauthorizationattributesforthegroup.
(ToconfigureausergroupandassignauthorizationattributesthroughRADIUS,seethe
documentationforyourRADIUSserver.)
Syntax
set mac-usergroup group-name attr attribute-name value
Parameters
Default
None.
Mode
Enabled.
Usage
Tochangethevalueofanattribute,entersetmacusergroupattrwiththenewvalue.Todeletean
attribute,useclearmacusergroupattr.
YoucanassignattributestoindividualMACusersandtoMACusergroups.Ifattributesare
configuredforaMACuserandalsoforthegroup
theMACuserisin,theattributesassignedto
theindividualMACusertakeprecedenceforthatuser.Forexample,ifthestartdateattribute
configuredforaMACuserissoonerthanthestartdateconfiguredfortheMACusergroupthe
userisin,theMACusersnetwork
accesscanbeginassoonastheuserstartdate.TheMACuser
doesnotneedtowaitfortheMACusergroup’sstartdate.
Example
ThefollowingcommandcreatestheMACusergroupeastcoastersandassignsthegroupmembers
toVLANorange:
RBT-8100# set mac-usergroup eastcoasters attr vlan-name orange
success: change accepted.
groupname NameofaMACusergroup.Specifyanameofupto32 alphanumeric
characters,withnospaces.Thenamemustbeginwithanalphabetic
character.
attributename
value
Nameandvalueofanattributeyouareusing toauthorizeallMACusersin
thegroupforaparticularserviceor
sessioncharacteristic.(Foralistof
authorizationattributes,seeTable 81onpage 845.)