Operation Manual

MP Access Point Commands
Mobility System Software Command Reference Guide
Version 7.3
12 – 286
set service-profile attr
Configures authorization attributes that are applied by default to users accessing the SSID
managed by the service profile. These SSID default attributes are applied in addition to any
supplied by the RADIUS server or from the local database.
Syntax set service-profile profile-name attr attribute-name value
Defaults By default, a service profile does not have any authorization attributes set.
Access Enabled.
History Introduced in MSS 4.1.
Usage To change the value of a default attribute for a service profile, use the set service-profile
attr command and specify a new value.
The SSID default attributes are applied in addition to any attributes supplied for the user by the
RADIUS server or the local database. When the same attribute is specified both as an SSID
default attribute and through AAA, then the attribute supplied by the RADIUS server or the local
database takes precedence over the SSID default attribute. If a location policy is configured, the
location policy rules also take precedence over SSID default attributes. The SSID default
attributes serve as a fallback when neither the AAA process, nor a location policy, provides them.
For example, a service profile might be configured with the service-type attribute set to 2. If a
user accessing the SSID is authenticated by a RADIUS server, and the RADIUS server returns
the vlan-name attribute set to orange, then that user has a total of two attributes set:
service-type and vlan-name.
If the service profile is configured with the vlan-name attribute set to blue, and the RADIUS
server returns the vlan-name attribute set to orange, then the attribute from the RADIUS server
takes precedence; the user is placed in the orange VLAN.
You can display the attributes for each connected user and if they are set through AAA or through
SSID defaults by entering the show sessions network verbose command. You can display the
configured SSID defaults by entering the show service-profile command.
Examples The following command assigns users accessing the SSID managed by service profile
sp2 to VLAN blue:
MX# set service-prof sp2 attr vlan-name blue
success: change accepted.
The following command assigns users accessing the SSID managed by service profile sp2 to the
Mobility Profile tulip.
MX# set service-prof sp2 attr mobility-profile tulip
success: change accepted.
profile-name Service profile name.
attribute-name value Name and value of an attribute you are using to authorize SSID users
for a particular service or session characteristic.
For a list of authorization attributes and values that you can assign to
network users, see Table 9– 9 on page 179. All of the attributes listed
in Table 9– 9 can be used with this command except ssid.
MSS Version 4.1 Command introduced.
MSS Version 7.0 Attribute simultaneous-login added.