Operation Manual

AAA Commands
AAA Commands
9 – 183
Examples The following command creates the MAC user group eastcoasters and assigns the group
members to VLAN orange:
MX# set mac-usergroup eastcoasters attr
vlan-name orange
success: change accepted.
See Also
● clear mac-usergroup attr on page 9-156
● show aaa on page 9-190
set mobility-profile
Creates a Mobility Profile and specifies the MP and/or wired authentication ports on the MX
through which any user assigned to the profile is allowed access.
Syntax set mobility-profile name name
{port {none | all | port-list}} | {ap {none | all | apnum}}
Defaults No default Mobility Profile exists on the MX. If you do not assign Mobility Profile
attributes, all users have access through all ports, unless denied access by other AAA servers or by
access control lists (ACLs).
Access Enabled.
History
Usage
To assign a Mobility Profile to a user or group, specify it as an authorization attribute in
one of the following commands:
● set user attr mobility-profile name
● set usergroup attr mobility-profile name
● set mac-user attr mobility-profile name
● set mac-usergroup attr mobility-profile name
name Name of the Mobility Profile. Specify up to 32 alphanumeric
characters, with no spaces.
none Prevents any user to whom this profile is assigned from
accessing any MP access point or wired authentication port on
the MX switch.
all Allows any user to whom this profile is assigned to access all
MP access ports and wired authentication port on the MX
switch.
port-list List of MP access ports or wired authentication ports through
which any user assigned this profile is allowed access. The
same port can be used in multiple Mobility Profile port lists.
ap-num List of MP connections through which any user assigned this
profile is allowed access. The same MP can be used in multiple
Mobility Profile port lists.
Version 1.0 Command introduced
Version 2.0 Option dap added for Distributed MPs