authorization-attribute (RADIUS-server user view)

Syntax

authorization-attribute { acl acl-number | vlan vlan-id } *

undo authorization-attribute { acl | vlan } *

View

RADIUS-server user view

Default level

2: System level

Parameters

acl acl-number: Specifies the number of an ACL in the range of 2000 to 5999.

vlan vlan-id: Specifies the ID of a VLAN in the range of 1 to 4094.

Description

Use authorization-attribute to specify the authorization attributes (ACL and VLAN) that the RADIUS server assigns to the RADIUS client in a response message after the RADIUS user passes RADIUS authentication. The RADIUS client uses the assigned authorization attributes to control the access of the RADIUS user.

Use undo authorization-attribute to remove the configuration.

By default, no authorization attribute is configured.

Related commands: radius-server user.

Examples

# Configure the authorized VLAN for RADIUS user user1 as VLAN 3.

<Sysname> system-view
[Sysname] radius-server user user1
[Sysname-rdsuser-user1] authorization-attribute vlan 3