MSM7xx Controllers Configuration Guide v6.4.0

The following entry is added to the local profile for the controller:
access-list=redirect,DNAT-SERVER,tcp,all,80
access-list=redirect,ACCEPT,all,all,all
The following entry is added to the RADIUS profile for each user:
dnat-server=redirect,srv1.mycompany.com,8080,srv2.mycompany.com,8080
Colubris AV-Pair - User attribute values
User values let you define settings for individual user accounts.
Each Colubris AV-Pair value is specified using the following format:
<keyword>=<value>
The following table lists all supported user value keywords and provides a link to complete
descriptions for each one.
For more information seeColubris AV-Pair keyword
“Access list” (page 484)access-list
“Advertising” (page 485)ads-presentation
“Bandwidth level” (page 485)bandwidth-level
“Data rate” (page 485)max-output-ratemax-input-rate
“One-to-one NAT” (page 486)one-to-one-nat
“Public IP address” (page 486)use-public-ip-subnet
“Quotas” (page 486)max-input-packets
max-output-packets
max-input-octets
max-output-octets
max-total-octets
max-total-packets
“SMTP redirection” (page 487)smtp-redirect
“Station polling” (page 488)polling-arp-intervalpolling-max-arp-count
“Redirect URL” (page 479)redirect-url
“Custom public access interface Web pages” (page
488)
welcome-url
“Custom public access interface Web pages” (page
488)
goodbye-url
Access list
An access list is a set of rules that govern how the controller controls user access to protected
network resources (those attached to the controller Internet port). Access lists are defined in the
profile for the controller) and are activated in user profiles as needed.
Only one access list can be activated per user profile. See “Access list” (page 460).
Syntax
use-access-list=uselistname
484 Working with RADIUS attributes