Hub/Switch Reference Guide

210 AAA Commands
NN47250-100 (Version 02.51)
service-type Type of access the user is
requesting.
One of the following numbers:
• 2—Framed; for network user access
• 6—Administrative; for administrative
access to the WSS, with authorization
to access the enabled (configuration)
mode. The user must enter the enable
command and the correct enable
password to access the enabled mode.
• 7—NAS-Prompt; for administrative
access to the nonenabled mode only.
In this mode, the user can still enter
the enable command and the correct
enable password to access the enabled
mode.
For administrative sessions, the WSS always
sends 6 (Administrative).
The RADIUS server can reply with one of the
values listed above.
If the service-type is not set on the RADIUS
server, administrative users receive NAS-Prompt
access, and network users receive Framed access.
session-timeout
(network access mode
only)
Maximum number of
seconds for the user’s
session.
Number between 0 and 4,294,967,296 seconds
(approximately 136.2 years).
Note. If the global reauthentication timeout (set
by the set dot1x reauth-period command) is
shorter than the session-timeout, WSS Software
uses the global timeout instead.
ssid
(network access mode
only)
SSID the user is allowed to
access after authentication.
Name of the SSID you want the user to use. The
SSID must be configured in a service profile, and
the service profile must be used by a radio profile
assigned to Nortel radios in the Mobility Domain.
start-date Date and time at which the
user becomes eligible to
access the network.
WSS Software does not
authenticate the user unless
the attempt to access the
network occurs at or after
the specified date and time,
but before the end-date (if
specified).
Date and time, in the following format:
YY/MM/DD-HH:MM
You can use start-date alone or with end-date.
You also can use start-date, end-date, or both in
conjunction with time-of-day.
Table 1: Authentication Attributes for Local Users (continued)
Attribute Description Valid Value(s)