3com MSR 20-20 참조 매뉴얼
1920
C
HAPTER
127: AAA C
ONFIGURATION
C
OMMANDS
idle-cut minute: Configures the idle cut function. The idle cut period ranges from
1 to 120, in minutes.
1 to 120, in minutes.
ip ip-address: Specifies the IP address of the user. The attribute ip command only
applies to authentications that support IP address passing, such as 802.1x. If you
configure the command to authentications that do not support IP address passing,
such as MAC address authentication, the local authentication will fail.
applies to authentications that support IP address passing, such as 802.1x. If you
configure the command to authentications that do not support IP address passing,
such as MAC address authentication, the local authentication will fail.
location: Specifies the port binding attribute of the user.
nas-ip ip-address: Specifies the IP address of the port of the remote access server
bound by the user. The default is 127.0.0.1, that is, the device itself. This keyword
and argument combination is required only when the user is bound to a remote
port.
bound by the user. The default is 127.0.0.1, that is, the device itself. This keyword
and argument combination is required only when the user is bound to a remote
port.
port slot-number subslot-number port-number: Specifies the port to which the
user is bound. The value of slot-number and subslot-number both range from 0 to
15. The value of port-number ranges from 0 to 255. The ports bounded are
determined by port number, regardless of port type.
user is bound. The value of slot-number and subslot-number both range from 0 to
15. The value of port-number ranges from 0 to 255. The ports bounded are
determined by port number, regardless of port type.
mac mac-address: Specifies the MAC address of the user in the format of H-H-H.
vlan vlan-id: Specifies the VLAN to which the user belongs. The vlan-id argument
is in the range 1 to 4094.
is in the range 1 to 4094.
Description
Use the attribute command to set some of the attributes for a LAN access user.
Use the undo attribute command to remove the configuration.
The idle-cut command in user interface view applies to lan-access users only.
Related command:
Example
# Set the IP address of local user user1 to 10.110.50.1.
<Sysname> system-view
[Sysname] local-user user1
[Sysname-luser-user1] attribute ip 10.110.50.1
authentication default
Syntax
authentication default { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local |
none | radius-scheme radius-scheme-name [ local ] }
none | radius-scheme radius-scheme-name [ local ] }
undo authentication default
View
ISP domain view
Parameter
hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by
its name, which is a string of 1 to 32 characters.
its name, which is a string of 1 to 32 characters.
local: Performs local authentication.