Tearing Down User Connections Forcibly; Configuring A Nas Id-Vlan Binding - 3Com S7906E Configuration Manual

Follow these steps to configure the attributes for a user group:
To do...
Enter system view
Create a user group and enter user
group view
Configure the authorization attributes
for the user group

Tearing down User Connections Forcibly

Follow these steps to tear down user connections forcibly:
To do...
Enter system view
Tear down AAA user
connections forcibly on a
distributed device
Tear down AAA user
connections forcibly on a
distributed IRF device

Configuring a NAS ID-VLAN Binding

In some application scenarios, it is required to identify the access locations of users. In this case, you
need to configure NAS ID-VLAN bindings on the access device, so that when a user gets online, the
access device can obtain the NAS ID by the access VLAN of the user and then send the NAS ID to the
RADIUS server through the NAS-identifier attribute. For more information about this, refer to Portal
Configuration of the Security Volume.
Follow these steps to configure a NAS ID-VLAN binding:
To do...
Enter system view
Create a NAS ID profile and
enter NAS ID profile view
Configure a NAS ID-VLAN
binding
Use the command...
system-view
user-group group-name
authorization-attribute { acl
acl-number |
callback-number
callback-number | idle-cut
minute | level level |
user-profile profile-name |
vlan vlan-id | work-directory
directory-name } *
Use the command...
system-view
cut connection { all | domain
isp-name | ucibindex
ucib-index | user-name
user-name } [ slot slot-number ]
cut connection { all | domain
isp-name | ucibindex
ucib-index | user-name
user-name } [ chassis
chassis-number slot
slot-number ]
Use the command...
system-view
aaa nas-id profile
profile-name
nas-id nas-identifier bind vlan
vlan-id
1-23
Remarks
—
Required
Optional
By default, no
authorization attribute is
configured for a user
group.
Remarks
—
Required
Applicable to only LAN access,
and portal user connections at
present.
Required
Applicable to only LAN access,
and portal user connections at
present.
Remarks
—
Required
Required
By default, no NAS ID-VLAN
binding exists.