3Com WX4400 3CRWX440095A Attribute Description Valid Values End-date, Filter-id, Idle-timeout

Assigning Authorization Attributes 489

Table 43 Authentication Attributes for Local Users (continued)

Attribute	Description	Valid Value(s)
end-date	Date and time after	Date and time, in the following
	which the user is no	format:
	longer allowed to be	YY/MM/DD-HH:MM
	on the network.
		You can use end-datealone or with
		start-date. You also can use
		start-date,end-date, or both in
		conjunction with time-of-day.
filter-id	Security access control	Name of an existing security ACL, up
(network access	list (ACL), to permit or	to 32 alphanumeric characters, with
mode only)	deny traffic received	no tabs or spaces.
	(input) or sent (output)	„ Use acl-name.into filter traffic that
	by the WX switch.
		enters the switch from users via a
	(For more information	MAP access port or wired
	about security ACLs,	authentication port, or from the
	see Chapter 19,	network via a network port.
	“Configuring and	„ Use acl-name.outto filter traffic
	Managing Security
		sent from the switch to users via a
	ACLs,” on page 377.)
		MAP access port or wired
		authentication port, or from the
		network via a network port.
		If the Filter-Id value returned through
		the authentication and authorization
		process does not match the name of a
		committed security ACL in the WX, the
		user fails authorization and is unable
		to authenticate.
idle-timeout	This option is not implemented in the current MSS version.
mobility-profile	Mobility Profile	Name of an existing Mobility Profile,
(network access	attribute for the user.	which can be up to 32 alphanumeric
	(For more information,	characters, with no tabs or spaces.
mode only)
	see “Configuring a	Note: If the Mobility Profile feature is

Mobility Profile” on	enabled, and a user is assigned the
page 510.)
	name of a Mobility Profile that does
	not exist on the WX switch, the user is
	denied access.