Command Manual - Security
Quidway S3500 Series Ethernet Switches Chapter 3 AAA & RADIUS Protocol Configuration Commands
Huawei Technologies Proprietary
3-2
3.1.2 attribute
Syntax
attribute { ip ip-address | mac mac-address | idle-cut second | access-limit
max-user-number | vlan vlanid | location { nas-ip ip-address port portnum | port
portnum }
undo attribute { ip | mac | idle-cut | access-limit | vlan | location }*
View
Local user view
Parameter
ip: Specifies the IP address of a user.
mac mac-address: Specifies the MAC address of a user. Where, mac-address takes on
the hexadecimal format of H-H-H.
idle-cut second: Allows/Disallows the local users to enable the idle-cut function. (The
specific data for this function depends on the configuration of the ISP domain where the
users locate.) The argument minute defines the idle-cut time, which is in the range of 60
to 7200 seconds.
access-limit max-user-number: Specifies the maximum number of access users who
access the device by using the current user name. The argument max-user-number is
in the range of 1 to 1024.
vlan vlanid: Sets the VLAN attribute of user, in other words, the VLAN to which a user
belong. The argument vlanid is an integer in the range of 1 to 4094.
location: Sets the port binding attribute of user.
nas-ip ip-address: The IP address of the access server in the event of binding a remote
port with a user. The argument ip-address is an IP address in dotted decimal format and
defaults to 127.0.0.1.
port portnum: Sets the port with which a user is bound. The argument portnum is
represented by “SlotNumber SubSlotNumber PortNumber”. If any of these three items
is absent, the value 0 can be used to replace it.
Description
Using attribute command, you can configure some attributes for specified local user.
Using undo attribute command, you can cancel the attributes that have been defined
for this local user.
It should be noted that the argument nas-ip must be defined for a user bound with a
remote port, which is unnecessary, however, in the event of a user bound with a local
port.
For the related command, see display local-user.
To Next Page
Loading...
Need help?
General
