3Com 3CRWXR10095A, 3CRWX120695A WXR100 manual Filter-id, Idle-timeout, Mobility-profile

294CHAPTER 8: CONFIGURING AUTHENTICATION, AUTHORIZATION, AND ACCOUNTING PARAMETERS

Table 22 Authentication Attributes for Local Users (continued)

Attribute	Description	Valid Value(s)
filter-id	Inbound or outbound	If configured in the WX switch’s local
(network access	ACL to apply to the	database, this attribute can be an
	user.	access control list (ACL) to filter
mode only)
		outbound or inbound traffic. Use the
		following format:
		inboundacl.in
		or
		outboundacl.out
		If you are configuring the attribute
		on a RADIUS server, the value field of
		filter-id can specify up to two ACLs.
		Any of the following are valid:
		filter-id = "Profile=acl1"
		filter-id = "OutboundACL=acl2"
		filter-id = "Profile=acl1
		OutboundACL=acl2"
		(Each example goes on a single line
		on the server.) The format in which to
		specify the values depends on the
		RADIUS server.
		Regardless of whether the attributes
		are defined locally or on a RADIUS
		server, the ACLs must already be
		configured on the WX switch.
		(For more information, see “Mapping
		an ACL” on page 228.
idle-timeout	This option is not implemented in the current MSS version.
mobility-profile	Mobility Profile	Name of an existing Mobility Profile,
(network access	attribute for the user.	which can be up to 32 alphanumeric
	(For more information,	characters, with no tabs or spaces.
mode only)
	see “Viewing and	If the Mobility Profile feature is
	Changing Mobility
		enabled, and a user is assigned the
	Profiles” on page 328.)
		name of a Mobility Profile that does
	Mobility-Profile is a	not exist on the WX switch, the user
	3Com vendor-specific	is denied access.
	attribute (VSA). The
	vendor ID is 43, and the
	vendor type is 2.