Specifications

Assigning Authorization Attributes
17-44 Configuring AAA for Network Users
start-date Date and time at which the
user becomes eligible to
access the network.
MSS does not authenticate
the user unless the attempt
to access the network
occurs at or after the
specified date and time, but
before the end-date (if
specified).
Date and time, in the following format:
YY/MM/DD-HH:MM
You can use start-date alone or with end-date. You also
can use start-date, end-date, or both in conjunction with
time-of-day.
time-of-day
(network access
mode only)
Day(s) and time(s) during
which the user is permitted
to log into the network.
After authorization, the
user’s session can last until
either the Time-Of-Day
range or the Session-
Timeout duration (if set)
expires, whichever is
shorter.
One of the following:
• never—Access is always denied.
• any—Access is always allowed.
• al—Access is always allowed.
• One or more ranges of values that consist of one of
the following day designations (required), and a time
range in hhmm-hhmm 4-digit 24-hour format
(optional):
• mo—Monday
• tu—Tuesday
• we—Wednesday
• th—Thursday
• fr—Friday
• sa—Saturday
• su—Sunday
• wk—Any day between Monday and Friday
Separate values or a series of ranges (except time
ranges) with commas (,) or a vertical bar (|). Do not use
spaces.
The maximum number of characters is 253.
For example, to allow access only on Tuesdays and
Thursdays between 10 a.m. and 4 p.m., specify the
following: time-of-day tu1000-1600,th1000-1600
To allow access only on weekdays between 9 a.m and
5 p.m., and on Saturdays from 10 p.m. until 2 a.m.,
specify the following: time-of-day wk0900-
1700,sa2200-0200
You can use time-of-day in conjunction with start-date,
end-date, or both.
Table 17-5 Authentication Attributes for Local Users (continued)
Attribute Description Valid Value(s)