Nortel 2350 Reference Manual page 282

282 Configuring Authentication, Authorization, and Accounting Parameters
Table 1: Authentication Attributes for Local Users (continued)
Attribute
end-date
filter-id
(network access mode
only)
idle-timeout
mobility-profile
(network access mode
only)
NN47250-102 (320666-G Version 02.01)
Description
Date and time after which
the user is no longer
allowed to be on the
network.
Security access control list
(ACL), to permit or deny
traffic received (input) or
sent (output) by the WSS.
(For more information
about security ACLs, see
"Viewing and Configuring
ACLs" (page 208).)
This option is not implemented in the current WSS Software version.
Mobility Profile attribute
for the user. (For more
information, see "Viewing
and Changing Mobility
Profiles" (page 306).)
Note: Mobility-Profile is a
Nortel vendor-specific
attribute (VSA). The
vendor ID is 562, and the
vendor type is 242.
Valid Value(s)
Date and time, in the following format:
YY/MM/DD-HH:MM
You can use end-date alone or with start-date.
You also can use start-date, end-date, or both in
conjunction with time-of-day.
Name of an existing security ACL, up to
253 alphanumeric characters, with no tabs or
spaces.
• Use acl-name.in to filter traffic that enters the
switch from users via an AP access port or
wired authentication port, or from the network
via a network port.
• Use acl-name.out to filter traffic sent from the
switch to users via an AP access port or wired
authentication port, or from the network via a
network port.
Note: If the Filter-Id value returned through the
authentication and authorization process does not
match the name of a committed security ACL in
the WSS, the user fails authorization and is unable
to authenticate.
Name of an existing Mobility Profile, which can
be up to 32 alphanumeric characters, with no tabs
or spaces.
Note: If the Mobility Profile feature is enabled,
and a user is assigned the name of a Mobility
Profile that does not exist on the WSS, the user is
denied access.