Configuring a user profile
A user profile provides a configuration template to save predefined configurations, such as a QoS policy. Different user profiles are applicable to different scenarios.
The user profile implements service applications on a per-user basis. Every time a user accesses the device, the device automatically applies the configurations in the user profile that is associated only with this user.
User-based traffic policing is more flexible than interface-based traffic policing. In interface-based traffic policing, if a user moves between ports to access a device, you must remove the policy from the previous port and then configure the same policy on the port being used to restrict user behaviors. The configuration task is tedious and error prone.
The user profile supports working with 802.1X and portal authentications and restricts authenticated users' behaviors. as follows:
After the authentication server verifies a user, the server sends the device the name of the user profile associated with the user.
If the profile is enabled, the device applies the configurations in the user profile and allows user access based on all valid configurations.
If the user profile is disabled, the device denies the user access.
After the user logs out, the device automatically disables configurations in the user profile, and the restrictions on the user access are removed.