H3C S7500E Series Command Manual page 916

Command Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Parameters
access-limit max-user-number: Specifies the maximum number of concurrent users
that can log in using the current username, which ranges from 1 to 1024.
idle-cut minute: Configures the idle cut function. The idle cut period ranges from 1 to
120, in minutes.
ip ip-address: Specifies the IP address of the user.
location: Specifies the port binding attribute of the user.
nas-ip ip-address: Specifies the IP address of the port of the remote access server
bound by the user. The default is 127.0.0.1, that is, the device itself. This keyword and
argument combination is required only when the user is bound to a remote port.
port slot-number subslot-number port-number: Specifies the port to which the user is
bound. The value of slot-number and subslot-number both range from 0 to 15. The
value of port-number ranges from 0 to 255. The ports bounded are determined by port
number, regardless of port type.
mac mac-address: Specifies the MAC address of the user in the format of H-H-H.
vlan vlan-id: Specifies the VLAN to which the user belongs. The vlan-id argument is an
integer in the range 1 to 4094.
Description
Use the attribute command to set some of the attributes for a LAN access user.
Use the undo attribute command to remove the configuration.
Note that:
The attribute access-limit command for local users is effective only after local
accounting scheme is configured.
The attribute ip command for local users is applicable only to the authentication
supporting IP address upload, for example, 802.1x authentication. If this
command is configured for the authentication that does not support IP address
upload, for example, MAC authentication, local authentication may fail.
The idle-cut command in user interface view applies to lan-access users only.
Related commands: display local-user.
Examples
# Set the IP address of local user user1 to 10.110.50.1.
<Sysname> system-view
[Sysname] local-user user1
[Sysname-luser-user1] attribute ip 10.110.50.1
Chapter 1 AAA/RADIUS/HWTACACS
1-7
Configuration Commands