3Com WXR100 3CRWXR10095A manual Or group in the local WX database and specify its value, Vlan-name

492CHAPTER 21: CONFIGURING AAA FOR NETWORK USERS

Table 43 Authentication Attributes for Local Users (continued)

Attribute	Description	Valid Value(s)
url	URL to which the user	Web URL, in standard format. For
(network access	is redirected after	example:
	successful WebAAA.	http://www.example.com
mode only)
		Note: You must include the http://
		portion.
		You can dynamically include any of
		the variables in the URL string:
		„	$u—Username
		„	$v—VLAN
		„	$s—SSID
		„	$p—Service profile name
		To use the literal character $ or ?, use
		the following:
		„	$$
		„	$q
vlan-name	Virtual LAN (VLAN)	Name of a VLAN that you want the
(network access	assignment.	user to use. The VLAN must be
	Note: On some	configured on a WX switch within the
mode only)
		Mobility Domain to which this WX
	RADIUS servers, you

might need to use the	switch belongs.
standard RADIUS
attribute
Tunnel-Pvt-Group-ID,
instead of VLAN-Name.

Assigning Attributes You can assign authorization attributes to individual users or groups of to Users and Groups users. Use any of the following commands to assign an attribute to a user

or group in the local WX database and specify its value:

set user username attr attribute-name value

set usergroup group-name attr attribute-name value set mac-usermac-addr attr attribute-name value

set mac-usergroupgroup-name attr attribute-name value

If attributes are configured for a user and also for the group the user is in, the attributes assigned to the individual user take precedence for that user. For example, if the start-date attribute configured for a user is sooner than the start-date configured for the user group the user is in, the user’s network access can begin as soon as the user start-date. The user does not need to wait for the user group’s start date.