3com S7906E Instruccion De Instalación

 

1-23 

Follow these steps to configure the attributes for a user group: 

Enter system view 

— 

Create a user group and enter user 
group view 

user-group group-name 

Required 

Configure the authorization attributes 
for the user group 

authorization-attribute { acl 
acl-number | 
callback-number  

callback-number | idle-cut 
minute | level level | 
user-profile profile-name | 
vlan vlan-id | work-directory 
directory-name } * 

Optional 

By default, no 
authorization attribute is 
configured for a user 
group. 

 

Follow these steps to tear down user connections forcibly: 

Enter system view 

— 

Tear down AAA user 
connections forcibly on a 
distributed device 

cut connection { all | domain 
isp-name | ucibindex 
ucib-index | user-name 
user-name } [ slot slot-number ]

Required 

Applicable to only LAN access, 
and portal user connections at 
present. 

Tear down AAA user 
connections forcibly on a 
distributed IRF device 

cut connection { all | domain 
isp-name | ucibindex 
ucib-index | user-name 
user-name } [ chassis 
chassis-number slot 
slot-number ] 

Required 

Applicable to only LAN access, 
and portal user connections at 
present. 

 

In some application scenarios, it is required to identify the access locations of users. In this case, you 

need to configure NAS ID-VLAN bindings on the access device, so that when a user gets online, the 

access device can obtain the NAS ID by the access VLAN of the user and then send the NAS ID to the 

RADIUS server through the NAS-identifier attribute. For more information about this, refer to Portal 

Configuration of the Security Volume. 

Follow these steps to configure a NAS ID-VLAN binding: 

Enter system view 

— 

Create a NAS ID profile and 
enter NAS ID profile view 

aaa nas-id profile 
profile-name 

Required 

Configure a NAS ID-VLAN 
binding 

nas-id nas-identifier bind vlan 
vlan-id 

Required 

By default, no NAS ID-VLAN 
binding exists.