3Com WX1200 3CRWX120695A Configuration Manual page 489

Table 43 Authentication Attributes for Local Users (continued)
Attribute Description
end-date Date and time after
which the user is no
longer allowed to be
on the network.
filter-id Security access control
(network access list (ACL), to permit or
mode only) deny traffic received
(input) or sent (output)
by the WX switch.
(For more information
about security ACLs,
see Chapter 19,
"Configuring and
Managing Security
ACLs," on page 377.)
idle-timeout This option is not implemented in the current MSS version.
mobility-profile Mobility Profile
attribute for the user.
(network access
(For more information,
mode only)
see "Configuring a
Mobility Profile" on
page 510.)
Assigning Authorization Attributes
Valid Value(s)
Date and time, in the following
format:
YY/MM/DD-HH:MM
You can use end-date alone or with
start-date. You also can use
start-date, end-date, or both in
conjunction with time-of-day.
Name of an existing security ACL, up
to 32 alphanumeric characters, with
no tabs or spaces.
Use acl-name.in to filter traffic that
enters the switch from users via a
MAP access port or wired
authentication port, or from the
network via a network port.
Use acl-name.out to filter traffic
sent from the switch to users via a
MAP access port or wired
authentication port, or from the
network via a network port.
If the Filter-Id value returned through
the authentication and authorization
process does not match the name of a
committed security ACL in the WX, the
user fails authorization and is unable
to authenticate.
Name of an existing Mobility Profile,
which can be up to 32 alphanumeric
characters, with no tabs or spaces.
Note: If the Mobility Profile feature is
enabled, and a user is assigned the
name of a Mobility Profile that does
not exist on the WX switch, the user is
denied access.
489