R2511-HP MSR Router Series Security Configuration Guide(V5)

405
Creating a user profile
Before you create a user profile, complete the following tasks:
• Configure authentication parameters on the device.
• Perform configurations on the client, the device, and the authentication server, for example,
username, password, authentication scheme, domain, and binding a user profile with a user.
To create a user profile:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a user profile,
and enter its view.
user-profile profile-name
You can use the command to enter the view of
an existing user profile.
Performing configurations in user profile view
After a user profile is created, perform configurations in user profile view. The configuration made in user
profile view takes effect when the user profile is enabled and a user using the user profile goes online.
Supported configurations include QoS policies and WLAN configurations. The QoS policies applied in
user profile view support only the remark, car, and filter actions.
For more information about QoS policies, see ACL and QoS Configuration Guide.
For more information about WLAN configuration, see WLAN Configuration Guide.
Enabling a user profile
Enable a user profile so that configurations in the profile can be applied by the device to restrict user
behaviors. If the device detects that the user profile is disabled, the device denies the associated user
even the user has been verified by the authentication server.
You can only edit or remove the configurations in a disabled user profile.
Disabling a user profile logs out the users that are using the user profile.
To enable a user profile:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable a user profile.
user-profile profile-name enable
A user profile is disabled by
default.
Displaying and maintaining user profile
Task Command Remarks
Display information about all the
created user profiles.
display user-profile [ | { begin | exclude
| include } regular-expression ]
Available in any view.