582 Configuring AAA for network users
NN47250-500 (Version 03.01)

Using dynamic fields in Web-based AAA redirect URLs

You can include variables in the URL to which a Web-based AAA client is redirected after authentication and authoriza-
tion. Table 36 lists the variables you can include in a redirect URL.
A URL string can also contain the literal characters $ and ?, if you use the values listed in Table 37.
You can configure a redirect URL for a group of users or for an individual user. For example, the following command
configures a redirect URL containing a variable for the username:
WSS# set usergroup ancestors attr url http://myserver.com/$u.html
success: change accepted.
The variable applies to all Web-based AAA users in user group ancestors. When user zinjanthropus is successfully
authenticated and authorized, WSS Software redirects the user to the following URL:
http://myserver.com/zinjanthropus.html
When user piltdown is successfully authenticated and authorized, WSS Software redirects the user to the following
URL:
http://myserver.com/piltdown.html
The following example configures a redirect URL that contains a script argument using the literal character ?:
WSS# set usergroup ancestors attr url https://saqqara.org/login.php$quser=$u
success: change accepted.
When user djoser is successfully authenticated and authorized, WSS Software redirects the user to the following URL:
https://saqqara.org/login.php?user=djoser
To verify configuration of a redirect URL and other user attributes, type the show aaa command.

Table 36: Variables for redirect URLs

Variable Description
$u Username of the Web AAA user
$v VLAN to which the user was assigned during authorization
$s SSID the user is on
$p Name of the service profile that manages the parameters for the
SSID

Table 37: Values for literal characters

Variable Description
$$ The literal character $
$q The literal character ?