D-Link DWS-1008 Cli Reference Manual page 146

DWS-1008 CLI Reference Guide
set location policy (continued)
The following command authorizes users entering the network on ports 2 through 4 and port
6 to use the floor2 VLAN, overriding any settings from AAA:
DWS-1008# set location policy permit vlan floor2 if port 2-4,6
The following command places all users who are authorized for SSID tempvendor_a into
VLAN kiosk_1:
DWS-1008# set location policy permit vlan kiosk_1 if ssid eq tempvendor_a success:
change accepted.
set mac-user
Configures a user profile in the local database on the switch for a user who can be authenticated
by a MAC address, and optionally adds the user to a MAC user group.
(To configure a MAC user profile in RADIUS, see the documentation for your RADIUS
server.)
Syntax: set mac-user mac-addr [group group-name]
mac-addr
group-name Name of an existing MAC user group.
Defaults: None
Access: Enabled
Usage: MSS does not require MAC users to belong to user groups. Users authenticated by
MAC address can be authenticated only for network access through the switch. MSS
does not support passwords for MAC users.
Examples: The following command creates a user profile for a user at MAC address
DWS-1008# set mac-user 01:02:03:04:05:06 group eastcoasters
success: change accepted.
set mac-user attr
Assigns an authorization attribute in the local database on the switch to a user who is
authenticated by a MAC address. (To assign authorization attributes through RADIUS, see
the documentation for your RADIUS server.)
D-Link Systems, Inc.
MAC address of the user, in hexadecimal numbers separated by colons (:).
You can omit leading zeros.
01:02:03:04:05:06 and assigns the user to the eastcoasters user group:
AAA Commands
145