C613-50631-01 Rev A Command Reference for IE340 Series 2460
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
LOCAL RADIUS SERVER COMMANDS
ATTRIBUTE
(RADSRV-GRP)
or the command:
awplus(config-radsrv-group)# attribute acct-terminate-cause 1
You can define more than one instance of an attribute name (or id) by using the
repeated parameter. For example:
awplus(config-radsrv-group)# attribute repeated
Nas-filter-Rule "deny in tcp from any to 0.0.0.0/0 23”
awplus(config-radsrv-group)# attribute repeated
Nas-filter-Rule "deny in tcp from any to fe80::b1 23"
Examples To define the attribute name ‘Service-Type’ with Administrative User (6) to the
RADIUS User Group ‘Admin’, use the following commands:
awplus# configure terminal
awplus(config)# radius-server local
awplus(config-radsrv)# group Admin
awplus(config-radsrv-group)# attribute Service-Type 6
To delete the attribute ‘Service-Type’ from the RADIUS User Group ‘Admin’, use the
following commands:
awplus# configure terminal
awplus(config)# radius-server local
awplus(config-radsrv)# group Admin
awplus(config-radsrv-group)# no attribute Service-Type
To define multiple values for attribute 'NAS-Filter-Rule', use the commands:
awplus# configure terminal
awplus(config)# radius-server local
awplus(config-radsrv)# group dynamicAcl
awplus(config-radsrv-group)# attribute repeated
NAS-Filter-Rule "deny in tcp from any to 0.0.0.0/0 23"
awplus(config-radsrv-group)# attribute repeated
NAS-Filter-Rule "deny in tcp from any to fe80::b1 23"
To delete a specific value from the attribute 'NAS-Filter-Rule', use the commands:
awplus# configure terminal
awplus(config)# radius-server local
awplus(config-radsrv)# group dynamicAcl
awplus(config-radsrv-group)# no attribute NAS-Filter-Rule "deny
in tcp from any to 0.0.0.0/0 23"
Related
commands
egress-vlan-id (radsrv-grp)
egress-vlan-name (radsrv-grp)
help radius-attribute
Command
changes
Version 5.5.0-1.1: repeated parameter added