4000 Router Series Security Command Reference

[Sysname-ugroup-abc] authorization-attribute vlan 3

# Assign the security-audit user role to device management user xyz as the authorized user role.

<Sysname> system-view

[Sysname] local-user xyz class manage

[Sysname-luser-manage-xyz] authorization-attribute user-role security-audit

This operation will delete all other roles of the user. Are you sure? [Y/N]:y

Related commands

• display local-user

• display user-group

bind-attribute

Use bind-attribute to configure binding attributes for a local user.

Use undo bind-attribute to remove binding attributes of a local user.

Syntax

bind-attribute { call-number call-number [ : subcall-number ] | ip ip-address | location port slot-number

subslot-number port-number | mac mac-address | vlan vlan-id } *

undo bind-attribute { call-number | ip | location | mac | vlan } *

Default

No binding attribute is configured for a local user.

Views

Local user view

Predefined user roles

network-admin

Parameters

call-number call-number: Specifies a calling number for ISDN user authentication. The call-number

argument is a string of 1 to 64 characters. This option applies only to PPP users.

subcall-number: Specifies the sub-calling number. The total length of the calling number and the

sub-calling number cannot be more than 62 characters.

ip ip-address: Specifies the IP address to which the user is bound.

location port slot-number subslot-number port-number: Specifies the port to which the user is bound. The

slot-number argument is in the range of 0 to 255, the subslot-number argument is in the range of 0 to 15,

and the port-number argument is in the range of 0 to 255.

mac mac-address: Specifies the MAC address of the user in the format H-H-H.

vlan vlan-id: Specifies the VLAN to which the user belongs. The vlan-id argument is in the range of 1 to

4094.

Usage guidelines

Binding attributes are checked upon authentication of a local user. If the local user has a non-matching

attribute or lacks a required attribute, user authentication fails.