Hub/Switch Reference Guide

214 AAA Commands
NN47250-100 (Version 02.51)
• show aaa on page 210
set mobility-profile
Creates a Mobility Profile and specifies the AP and/or wired authentication ports on the WSS through which
any user assigned to the profile is allowed access.
Syntax set mobility-profile name name
{port {none | all | port-list}} | {ap {none | all | ap-num}}
Defaults No default Mobility Profile exists on the WSS. If you do not assign Mobility Profile
attributes, all users have access through all ports, unless denied access by other AAA servers or by
access control lists (ACLs).
Access Enabled.
Usage To assign a Mobility Profile to a user or group, specify it as an authorization attribute in
one of the following commands:
• set user attr mobility-profile name
• set usergroup attr mobility-profile name
• set mac-user attr mobility-profile name
• set mac-usergroup attr mobility-profile name
To enable the use of the Mobility Profile feature on the WSS, use the set mobility-profile mode command.
To change the ports in a profile, use set mobility-profile again with the updated port list.
name Name of the Mobility Profile. Specify up to 32 alphanumeric characters,
with no spaces.
none Prevents any user to whom this profile is assigned from accessing any AP
or wired authentication port on the WSS.
all Allows any user to whom this profile is assigned to access all AP access
ports and wired authentication port on the WSS.
port-list List of AP access ports or wired authentication ports through which any
user assigned this profile is allowed access. The same port can be used in
multiple Mobility Profile port lists.
ap-num List of AP connections through which any user assigned this profile is
allowed access. The same AP can be used in multiple Mobility Profile
port lists.
Caution! When the Mobility Profile feature is enabled, a user is denied access if
assigned a Mobility-Profile attribute in the local WSS database or RADIUS server when no
Mobility Profile of that name exists on the WSS.