Filter
Top Products
1920 CHAPTER 127: AAA CONFIGURATION COMMANDS
idle-cut minute: Configures the idle cut function. The idle cut period ranges from
1 to 120, in minutes.
ip ip-address: Specifies the IP address of the user. The attribute ip command only
applies to authentications that support IP address passing, such as 802.1x. If you
configure the command to authentications that do not support IP address passing,
such as MAC address authentication, the local authentication will fail.
location: Specifies the port binding attribute of the user.
nas-ip ip-address: Specifies the IP address of the port of the remote access server
bound by the user. The default is 127.0.0.1, that is, the device itself. This keyword
and argument combination is required only when the user is bound to a remote
port.
port slot-number subslot-number port-number: Specifies the port to which the
user is bound. The value of slot-number and subslot-number both range from 0 to
15. The value of port-number ranges from 0 to 255. The ports bounded are
determined by port number, regardless of port type.
mac mac-address: Specifies the MAC address of the user in the format of H-H-H.
vlan vlan-id: Specifies the VLAN to which the user belongs. The vlan-id argument
is in the range 1 to 4094.
Description Use the
attribute command to set some of the attributes for a LAN access user.
Use the undo attribute command to remove the configuration.
The idle-cut command in user interface view applies to lan-access users only.
Related command: display local-user.
Example # Set the IP address of local user user1 to 10.110.50.1.
<Sysname> system-view
[Sysname] local-user user1
[Sysname-luser-user1] attribute ip 10.110.50.1
authentication default
Syntax authentication default { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local |
none | radius-scheme radius-scheme-name [ local ]}
undo authentication default
View ISP domain view
Parameter hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by
its name, which is a string of 1 to 32 characters.
local: Performs local authentication.