Alcatel-Lucent 8950 AAA Computer Accessories User Manual


 
............................................................................................................................................................................................................................................................
The SMT User Files PanelCreating and Managing User Profiles with Files
19-12
365-360-001R6.0
Issue 1, December 2008
............................................................................................................................................................................................................................................................
Figure 19-13 User Profile Dialog–Items to Verify tab
Setting Reply Attributes for a User
Set reply attributes to enable the NAS to configure the session for this user. The server
returns these attributes to the NAS if the authentication step is successful. This is referred
to as session provisioning.
You may assign reply attributes to a user’s profile and 8950 AAA will return these
attributes to the NAS if the authentication and authorization steps are successful. This is
referred to as session provisioning. When using the PolicyAssistant this is normally not
necessary.
If you use the PolicyAssistant to create policies, you can assign an attribute set that can
provide the same functionality as reply attributes. If a conflict occurs, the attributes in the
user’s profile take precedence over the attribute set defined for the policy.
An attribute set provides a list of attributes that you can use for all users using the same
policy. For example in Step 3 on page 10, if all your users are restricted to using PPP then
you would have to enter Framed-Protocol=PPP in every user’s profile. However, if you
create an attribute set with this attribute and other common attributes, you only need to
enter this once.
Attribute sets also provide a single point for updates. Instead of editing all your user
profiles when the area code changes, you can change it once in the attribute set.
The following procedure lists the steps for setting reply attributes: