R2511-HP MSR Router Series Security Command Reference(V5)

114
Related commands
display hwtacacs
RADIUS server configuration commands
The following matrix shows the command and router compatibility:
Command MSR900 MSR93X
MSR20-
1
X
MSR20 MSR30 MSR50 MSR1000
RADIUS
server
configuration
commands
No No Yes Yes Yes No Yes
authorization-attribute (RADIUS-server user view)
Use authorization-attribute to specify the authorization attributes (ACL and VLAN) that the RADIUS
server assigns to the RADIUS client in a response message after the RADIUS user passes RADIUS
authentication. The RADIUS client uses the assigned authorization attributes to control the access of the
RADIUS user.
Use undo authorization-attribute to remove the configuration.
Syntax
authorization-attribute { acl acl-number | vlan vlan-id } *
undo authorization-attribute { acl | vlan } *
Default
No authorization attribute is configured.
Views
RADIUS-server user view
Default command level
2: System level
Parameters
acl acl-number: Specifies the number of an ACL, in the range of 2000 to 5999.
vlan vlan-id: Specifies the ID of a VLAN, in the range of 1 to 4094.
Examples
# Configure the authorized VLAN for RADIUS user user1 as VLAN 3.
<Sysname> system-view
[Sysname] radius-server user user1
[Sysname-rdsuser-user1] authorization-attribute vlan 3
Related commands
radius-server user