10 user profile configuration, User profile overview, User profile configuration task list – H3C Technologies H3C S7500E Series Switches User Manual
Page 192: User profile configuration
10-1
10
User Profile Configuration
When configuring user profile, go to these sections for information you are interested in:
z
z
User Profile Configuration Task List
z
z
z
z
Displaying and Maintaining User Profile
User Profile Overview
User profile provides a configuration template to save predefined configurations. Based on different
application scenarios, you can configure different items for a user profile, such as Quality of Service
(QoS).
When accessing the device, users need to be authenticated. Currently, the access authentication
methods of 802.1X and Portal are supported. During the authentication process, the authentication
server sends the user profile name to the device, which then enables the configurations in the user
profile. After the users pass the authentication and access the device, the device will restrict the users’
access based on these configurations. When the users log out, the device automatically disables the
configurations in the user profile, and thus the restrictions on the users are removed. Therefore, user
profile is applicable to restricting online users’ access; if no users are online (no user access, no users
pass the authentication, or users have logged out), user profile does not take effect as it is a
predefined configuration.
With user profile, you can:
z
Make use of system resources more granularly. For example, without user profile, you can apply
a QoS policy based on interface, VLAN, globally and so on. This QoS policy is applicable to a
group of users. With user profile, however, you can apply a QoS policy on a per-user basis.
z
Restrict users’ access to the system resources more flexibly. For example, without user profile,
you can only perform traffic policing based on QoS for the traffic of the current interface; when the
physical position of users changes (for example, the users access the network using another
interface), you need to configure traffic policing on another interface. With user profile, however,
you can perform traffic policing on a per-user basis. As long as users are online, the
authentication server applies the corresponding user profile (with CAR configured) to the users;
when the users are offline, the system automatically removes the corresponding configuration.
User Profile Configuration Task List
Task
Remarks
Required