authorization-attribute (RADIUS-server user view)
Syntax
authorization-attribute { acl acl-number | vlan vlan-id } *
undo authorization-attribute { acl | vlan } *
View
RADIUS-server user view
Default level
2: System level
Parameters
acl acl-number: Specifies the number of an ACL in the range of 2000 to 5999.
vlan vlan-id: Specifies the ID of a VLAN in the range of 1 to 4094.
Description
Use authorization-attribute to specify the authorization attributes (ACL and VLAN) that the RADIUS server assigns to the RADIUS client in a response message after the RADIUS user passes RADIUS authentication. The RADIUS client uses the assigned authorization attributes to control the access of the RADIUS user.
Use undo authorization-attribute to remove the configuration.
By default, no authorization attribute is configured.
Related commands: radius-server user.
Examples
# Configure the authorized VLAN for RADIUS user user1 as VLAN 3.
<Sysname> system-view [Sysname] radius-server user user1 [Sysname-rdsuser-user1] authorization-attribute vlan 3