214CHAPTER 7: AAA COMMANDS

The following command restricts a user at MAC address 06:05:04:03:02:01 to network access between 7 p.m. on Mondays and Wednesdays and 7 a.m. on Tuesdays and Thursdays:

WX4400# set mac-user 06:05:04:03:02:01 attr time-of-day mo1900-1159,tu0000-0700,we1900-1159,th0000-0700 success: change accepted.

See Also

„clear mac-user attr on page 173

„display aaa on page 180

set mac-usergroupCreates a user group in the local database on the WX switch for users

attrwho are authenticated by a MAC address, and assigns authorization attributes for the group.

(To configure a user group and assign authorization attributes through RADIUS, see the documentation for your RADIUS server.)

Syntax set mac-usergroup

group-name attr attribute-name value

„group-name— Name of a MAC user group. Specify a name of up to 32 alphanumeric characters, with no spaces.

„attribute-name value Name and value of an attribute you are using to authorize all MAC users in the group for a particular service or session characteristic. (For a list of authorization attributes, see Table 40 on page 209.)

Defaults — None.

Access — Enabled.

History —Introduced in MSS Version 3.0.

Usage — To change the value of an attribute, enter set mac-usergroup attr with the new value. To delete an attribute, use clear mac-usergroup attr.

Page 214
Image 214
3Com 3CRWX440095A, 3CRWX120695A manual See Also „ clear mac-user attr on „ display aaa on, Syntax set mac-usergroup