Nortel Networks 2300 Series manual Set mac-usergroup attr, Clear mac-user attr on Show aaa on

AAA Commands 213

The following command restricts a user at MAC address 06:05:04:03:02:01 to network access between 7 p.m. on Mondays and Wednesdays and 7 a.m. on Tuesdays and Thursdays:

WSS# set mac-user 06:05:04:03:02:01 attr time-of-day mo1900-1159,tu0000-

0700,we1900-1159,th0000-0700 success: change accepted.

See Also

•clear mac-user attr on page 172

•show aaa on page 210

set mac-usergroup attr

Creates a user group in the local database on the WSS for users who are authenticated by a MAC address, and assigns authorization attributes for the group.

(To configure a user group and assign authorization attributes through RADIUS, see the documentation for your RADIUS server.)

Syntax set mac-usergroupgroup-name attr attribute-name value

group-name		Name of a MAC user group. Specify a name of up to
		32 alphanumeric characters, with no spaces. The name must begin
		with an alphabetic character.
attribute-name value		Name and value of an attribute you are using to authorize all MAC
		users in the group for a particular service or session characteristic.
		(For a list of authorization attributes, see Table 29 on page 198.)
Defaults	None.
Access	Enabled.

Usage To change the value of an attribute, delete an attribute, use clear mac-usergroup

enter set mac-usergroup attr with the new value. To attr.

You can assign attributes to individual MAC users and to MAC user groups. If attributes are configured for a MAC user and also for the group the MAC user is in, the attributes assigned to the individual MAC user take precedence for that user. For example, if the start-date attribute configured for a MAC user is sooner than the start-date configured for the MAC user group the user is in, the MAC user’s network access can begin as soon as the user start-date. The MAC user does not need to wait for the MAC user group’s start date.

Examples The following command creates the MAC user group eastcoasters and assigns the group members to VLAN orange:

WSS# set mac-usergroup eastcoasters attr vlan-name orange

success: change accepted.

See Also

•clear mac-usergroup attr on page 174

Nortel WLAN—Security Switch 2300 Series Command Line Reference