Nortel Networks 2300 Switch User Manual


 
Configuring AAA for network users 509
Nortel WLAN—Security Switch 2300 Series Configuration Guide
Using dynamic fields in Web-based AAA redirect URLs
You can include variables in the URL to which a Web-based AAA client is redirected after authentication and
authorization. Table 3 lists the variables you can include in a redirect URL.
A URL string can also contain the literal characters $ and ?, if you use the values listed in Table 4.
You can configure a redirect URL for a group of users or for an individual user. For example, the following
command configures a redirect URL containing a variable for the username:
WSS# set usergroup ancestors attr url http://myserver.com/$u.html
success: change accepted.
The variable applies to all Web-based AAA users in user group ancestors. When user zinjanthropus is success-
fully authenticated and authorized, WSS Software redirects the user to the following URL:
http://myserver.com/zinjanthropus.html
When user piltdown is successfully authenticated and authorized, WSS Software redirects the user to the
following URL:
http://myserver.com/piltdown.html
The following example configures a redirect URL that contains a script argument using the literal character ?:
WSS# set usergroup ancestors attr url https://saqqara.org/login.php$quser=$u
success: change accepted.
When user djoser is successfully authenticated and authorized, WSS Software redirects the user to the
following URL:
Table 3: Variables for redirect URLs
Variable Description
$u Username of the Web AAA user
$v VLAN to which the user was assigned during
authorization
$s SSID the user is on
$p Name of the service profile that manages the
parameters for the SSID
Table 4: Values for literal characters
Variable Description
$$ The literal character $
$q The literal character ?