Specifications

11-78 Access Point Commands
set service-profile attr
ConfiguresauthorizationattributesthatareappliedbydefaulttousersaccessingtheSSID
managedbytheserviceprofile.TheseSSIDdefaultattributesareappliedinadditiontoany
suppliedbytheRADIUSserverorfromthelocaldatabase.
Syntax
set service-profile name attr attribute-name value
Parameters
Defaults
Bydefault,aserviceprofiledoesnothaveanyauthorizationattributesset.
Mode
Enabled.
Usage
Tochangethevalueofadefaultattributeforaserviceprofile,usethesetserviceprofileattr
commandandspecifyanewvalue.Todeleteanattribute,usethe<???>command.
TheSSIDdefaultattributesareappliedinadditiontoanyattributessuppliedforthe userbythe
RADIUSserver
orthelocaldatabase.WhenthesameattributeisspecifiedbothasanSSIDdefault
attributeandthroughAAA, thentheattributesuppliedbytheRADIUSserverorthelocal
databasetakesprecedenceovertheSSIDdefaultattribute.Ifalocationpolicyisconfigured,the
locationpolicyrulesalsotakeprecedence
overSSIDdefaultattributes.TheSSIDdefaultattributes
serveasafallbackwhenneithertheAAAprocess,noralocationpolicy,providesthem.
Forexample,aserviceprofilemightbeconfiguredwiththeservicetypeattributesetto2.Ifauser
accessingtheSSIDisauthenticatedbyaRADIUS
server,andtheRADIUSserverreturnsthevlan
nameattributesettoorange,thenthatuserwillhaveatotaloftwoattributesset:servicetypeand
vlanname.
Iftheserviceprofileisconfiguredwiththevlannameattributesettoblue,andtheRADIUSserver
returnsthevlan
nameattributesettoorange,thentheattributefromtheRADIUSservertakes
precedence;theuserisplacedintheorangeVLAN.
YoucandisplaytheattributesforeachconnecteduserandwhethertheyaresetthroughAAAor
throughSSIDdefaultsbyenteringtheshowsessionsnetworkverbosecommand.
Youcan
displaytheconfiguredSSIDdefaultsbyenteringtheshowserviceprofilecommand.
name Serviceprofilename.
attributenamevalue NameandvalueofanattributeyouareusingtoauthorizeSSIDusers
foraparticularserviceorsessioncharacteristic.
Foralistofauthorizationattributesandvaluesthatyoucan
assignto
networkusers,seeTable 81onpage 845.Alloftheattributeslisted
inTable 81canbeusedwiththiscommandexceptssid.