1920 CHAPTER 127: AAA CONFIGURATION COMMANDS

idle-cutminute: Configures the idle cut function. The idle cut period ranges from 1 to 120, in minutes.

ip ip-address: Specifies the IP address of the user. The attribute ip command only applies to authentications that support IP address passing, such as 802.1x. If you configure the command to authentications that do not support IP address passing, such as MAC address authentication, the local authentication will fail.

location: Specifies the port binding attribute of the user.

nas-ipip-address: Specifies the IP address of the port of the remote access server bound by the user. The default is 127.0.0.1, that is, the device itself. This keyword and argument combination is required only when the user is bound to a remote port.

port slot-numbersubslot-numberport-number: Specifies the port to which the user is bound. The value of slot-numberand subslot-numberboth range from 0 to

15.The value of port-numberranges from 0 to 255. The ports bounded are determined by port number, regardless of port type.

mac mac-address: Specifies the MAC address of the user in the format of H-H-H.

vlan vlan-id: Specifies the VLAN to which the user belongs. The vlan-idargument is in the range 1 to 4094.

Description Use the attribute command to set some of the attributes for a LAN access user.

Use the undo attribute command to remove the configuration.

The idle-cutcommand in user interface view applies to lan-access users only.

Related command: display local-user.

Example # Set the IP address of local user user1 to 10.110.50.1.

<Sysname> system-view

[Sysname] local-user user1

[Sysname-luser-user1] attribute ip 10.110.50.1

authentication default

Syntax authentication default { hwtacacs-scheme hwtacacs-scheme-name[ local ] local none radius-scheme radius-scheme-name[ local ] }

undo authentication default

View ISP domain view

Parameter hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, which is a string of 1 to 32 characters.

local: Performs local authentication.

Page 1920
Image 1920
3Com MSR 30, MSR 50 manual Authentication default, Related command display local-user, Local Performs local authentication