set mac-usergroup attr

Creates a user group in the local database on the switch for users who are authenticated by a MAC address, and assigns authorization attributes for the group.

(To configure a user group and assign authorization attributes through RADIUS, see the documentation for your RADIUS server.)

Syntax: set mac-usergroup group-nameattr attribute-name value

group-name

Name of a MAC user group. Specify a name of up to 32 alphanumeric

 

characters, with no spaces. The name must begin with an alphabetic

 

character.

attribute-namevalue Name and value of an attribute you are using to authorize all MAC users in the group for a particular service or session characteristic.

Defaults: None.

Access: Enabled.

Usage: To change the value of an attribute, enter set mac-usergroup attr with the new value. To delete an attribute, use clear mac-usergroup attr.

You can assign attributes to individual MAC users and to MAC user groups. If attributes are configured for a MAC user and also for the group the MAC user is in, the attributes assigned to the individual MAC user take precedence for that user. For example, if the start-date attribute configured for a MAC user is sooner than the start-date configured for the MAC user group the user is in, the MAC user’s network access can begin as soon as the user start-date. The MAC user does not need to wait for the MAC user group’s start date.

Examples: The following command creates the MAC user group eastcoasters and assigns the group members to VLAN orange:

DWS-1008# set mac-usergroup eastcoasters attr vlan-name orange success: change accepted.

See Also:

clear mac-usergroup attr

show aaa

D-Link DWS-1008 CLI Manual

205

Page 208
Image 208
D-Link dws-1008 manual Set mac-usergroup attr, Syntax set mac-usergroup group-nameattr attribute-name value