Bind-Attribute - HPE FlexNetwork HSR6800 Security Command Reference

[Sysname] local-user abc
[Sysname-luser-abc] authorization-attribute vlan 2
# Configure the authorized VLAN of user group abc as VLAN 3.
<Sysname> system-view
[Sysname] user-group abc
[Sysname-ugroup-abc] authorization-attribute vlan 3

bind-attribute

Use bind-attribute to configure binding attributes for a local user.
Use undo bind-attribute to remove binding attributes of a local user.
Syntax
bind-attribute { call-number call-number [ : subcall-number ] | ip ip-address | location port
slot-number subslot-number port-number | mac mac-address | vlan vlan-id } *
undo bind-attribute { call-number | ip | location | mac | vlan } *
Default
No binding attribute is configured for a local user.
Views
Local user view
Default command level
3: Manage level
Parameters
call-number call-number: Specifies a calling number for ISDN user authentication. The call-number
argument is a string of 1 to 64 characters. This option applies only to PPP users.
subcall-number: Specifies the sub-calling number. The total length of the calling number and the
sub-calling number cannot be more than 62 characters.
ip ip-address: Specifies the IP address of the user.
location port slot-number subslot-number port-number: Specifies the port to which the user is
bound. The slot-number argument ranges from 0 to 255, the subslot-number argument ranges from
0 to 15, and the port-number argument ranges from 0 to 255.
mac mac-address: Specifies the MAC address of the user in the format H-H-H.
vlan vlan-id: Specifies the VLAN to which the user belongs. The vlan-id argument ranges from 1 to
4094.
Usage guidelines
Binding attributes are checked upon authentication of a local user. If the binding attributes of a local
user do not match the configured ones, the user fails checking and authentication.
Binding attribute checking does not take the service types of users into account. A configured binding
attribute is effective for all types of users. Configure binding attributes for different types of local
users with caution. For example, an IP address binding applies only to 802.1X authentication that
supports IP address upload. If the authentication method such as MAC authentication does not
support IP address upload, do not configure an IP address binding for the authentication method.
Otherwise, local authentication fails.
Examples
# Configure the bound IP of local user abc as 3.3.3.3.
<Sysname> system-view
38