Specifications

Assigning Authorization Attributes
RoamAbout Mobility System Software Configuration Guide 17-45
Assigning Attributes to Users and Groups
Youcanassignauthorizationattributestoindividualusersorgroupsofusers.Useanyofthe
followingcommandstoassignanattributetoauserorgroupinthelocalR o amAboutSwitch
databaseandspecifyitsvalue:
set user username attr attribute-name value
set usergroup group-name attr attribute-name value
set mac-user mac-addr attr attribute-name value
set mac-usergroup group-name attr attribute-name value
Ifattributesareconfiguredforauserandalsoforthegrouptheuserisin,theattributesassigned
totheindividualusertakeprecedenceforthatuser.Forexample,ifthestart‐dateattribute
configuredforauserissooner thanthestart‐dateconfiguredfortheusergroupthe
userisin,the
user’snetworkaccesscanbeginassoonastheuserstart‐date.Theuserdoesnotneedtowaitfor
theusergroup’sstartdate.
url
(network access
mode only)
URL to which the user is
redirected after successful
WebAAA.
Web URL, in standard format. For example:
http://www.example.com
Note: You must include the http:// portion.
You can dynamically include any of the variables in the
URL string:
• $u—Username
• $v—VLAN
• $s—SSID
• $p—Service profile name
To use the literal character $ or ?, use the following:
• $$
• $q
vlan-name
(network access
mode only)
Virtual LAN (VLAN)
assignment.
Note: On some RADIUS
servers, you might need to
use the standard RADIUS
attribute Tunnel-Pvt-Group-
ID, instead of VLAN-Name.
Name of a VLAN that you want the user to use. The
VLAN must be configured on a RoamAbout Switch within
the Mobility Domain to which this RoamAbout Switch
belongs.
acct-interim-
interval
Interval in seconds between
accounting updates, if start-
stop accounting mode is
enabled.
Number between 180 and 3,600 seconds, or 0 to disable
periodic accounting updates.
The RoamAbout Switch ignores the acct-interim-interval
value and issues a log message if the value is below 60
seconds.
Note: If both a RADIUS server and the RoamAbout
Switch supply a value for the acct-interim-interval
attribute, then the value from the RoamAbout Switch
takes precedence.
Table 17-5 Authentication Attributes for Local Users (continued)
Attribute Description Valid Value(s)