28
Every configurable authorization attribute has its definite application environments and purposes.
Consider the service types of users when assigning authorization attributes.
Authorization attributes configured for a user group are effective for all local users in the group. You can
group local users to improve configuration and management efficiency.
An authorization attribute configured in local user view takes precedence over the same attribute
configured in user group view. If an authorization attribute is configured in user group view but not in
local user view, the setting in user group view takes effect.
If only one user is playing the role of security log administrator in the system, you cannot delete the user
account, or remove or change the user's role, unless you configure another user as a security log
administrator first.
Examples
# Configure the authorized VLAN of user group
abc
as VLAN 3.
<Sysname> system-view
[Sysname] user-group abc
[Sysname-ugroup-abc] authorization-attribute vlan 3
bind-attribute
Syntax
bind-attribute
{
ip
ip-address
|
location
port
slot-number subslot-number port-number
|
mac
mac-address
|
vlan
vlan-id
} *
undo bind-attribute
{
ip
|
location
|
mac
|
vlan
} *
View
Local user view
Default level
3: Manage level
Parameters
ip
ip-address
: Specifies the IP address of the user.
location
: Specifies the port binding attribute of the user.
port
slot-number subslot-number port-number
: Specifies the port to which the user is bound. The
slot-number
argument is in the range 0 to 255, the
subslot-number
argument is in the range 0 to 15, and
the
port-number
argument is in the range 0 to 255. Only the numbers make sense here; port types are
not taken into account.
mac
mac-address
: Specifies the MAC address of the user in the format H-H-H.
vlan
vlan-id
: Specifies the VLAN to which the user belongs. The
vlan-id
argument is in the range 1 to
4094.
Description
Use the
bind-attribute
command to configure binding attributes for a local user.
Use the
undo bind-attribute
command to remove binding attributes of a local user.
By default, no binding attribute is configured for a local user.
