bind-attribute

Syntax

bind-attribute { ip ip-address | location port slot-number subslot-number port-number | mac mac-address | vlan vlan-id } *

undo bind-attribute { ip | location | mac | vlan } *

View

Local user view

Default level

3: Manage level

Parameters

ip ip-address: Specifies the IP address of the user.

location port slot-number subslot-number port-number: Specifies the port to which the user is bound, where slot-number is in the range of 0 to 255, subslot-number is in the range of 0 to 15, and port-number is in the range of 0 to 255.

mac mac-address: Specifies the MAC address of the user in the format H-H-H.

vlan vlan-id: Specifies the VLAN to which the user belongs, where vlan-id is in the range of 1 to 4094.

Description

Use bind-attribute to configure binding attributes for a local user.

Use undo bind-attribute to remove binding attributes of a local user.

By default, no binding attribute is configured for a local user.

Binding attributes are checked upon authentication of a local user. If the binding attributes of a local user do not match the configured ones, the user fails the checking and the authentication.

Binding attribute checking does not take the service types of the users into account. A configured binding attribute is effective for all types of users. Be cautious when deciding which binding attributes should be configured for which type of local users. For example, an IP address binding applies only to 802.1X authentication that supports IP address upload. If you configure an IP address binding for an authentication method that does not support IP address upload, for example, MAC authentication, the local authentication fails.

Examples

# Configure the bound IP of local user abc as 3.3.3.3.

<Sysname> system-view
[Sysname] local-user abc
[Sysname-luser-abc] bind-attribute ip 3.3.3.3