Nortel Networks 2300 manual Using Dynamic Fields in Web-based AAA Redirect URLs

Configuring AAA for Network Users 439

Using Dynamic Fields in Web-based AAA Redirect URLs

You can include variables in the URL to which a Web-based AAA client is redirected after authentication and authorization. Table 30 lists the variables you can include in a redirect URL.

Table 30: Variables for Redirect URLs

Variable	Description
$u	Username of the Web AAA user
$v	VLAN to which the user was assigned during authorization
$s	SSID the user is on
$p	Name of the service profile that manages the parameters for the
	SSID

A URL string can also contain the literal characters $ and ?, if you use the values listed in Table 31.

Table 31: Values for Literal Characters

Variable	Description
$$	The literal character $
$q	The literal character ?

You can configure a redirect URL for a group of users or for an individual user. For example, the following command configures a redirect URL containing a variable for the username:

23x0# set usergroup ancestors attr url http://myserver.com/$u.html

success: change accepted.

The variable applies to all Web-based AAA users in user group ancestors. When user zinjanthropus is successfully authenticated and authorized, WSS Software redirects the user to the following URL:

http://myserver.com/zinjanthropus.html

When user piltdown is successfully authenticated and authorized, WSS Software redirects the user to the following URL:

http://myserver.com/piltdown.html

The following example configures a redirect URL that contains a script argument using the literal character ?:

23x0# set usergroup ancestors attr url https://saqqara.org/login.php$quser=$u

success: change accepted.

Nortel WLAN Security Switch 2300 Series Configuration Guide