Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 1108)

1100 Brocade Mobility RFS Controller CLI Reference Guide
53-1003098-01
19
Example
rfs4000-229D58(config-role-policy-test-user-role-test)#assign rate-limit
to-client 200
rfs4000-229D58(config-role-policy-test-user-role-test)#
rfs4000-229D58(config-role-policy-test-user-role-test)#commit
rfs4000-229D58(config-role-policy-test-user-role-test)#
rfs4000-229D58(config-role-policy-test-user-role-test)#show context
user-role test precedence 1
assign vlan 1
assign rate-limit to-client 200
rfs4000-229D58(config-role-policy-test-user-role-test)#
The following examples define a role used to forward the IP traffic from all
engineers in Brocade onto vlan 2.
Create a new role policy with name ‘motorola-policy’.
<DEVICE>(config)#role-policy motorola-policy
Specify the LDAP server used for this role policy.
<DEVICE>(config-role-policy-motorola-policy)#ldap-query self
<DEVICE>(config-role-policy-motorola-policy)#ldap-server 1 host 192.160.1.1
bind-dn CN=Administrator,CN=Users,DC=motorolaMotorola,DC=com base-dn
CN=Administrator,CN=Users,DC=com bind-password 0 Motorola port 389
<DEVICE>(config-role-policy-motorola-policy)#ldap-timeout 2
Create a user defined role.
<DEVICE>(config-role-policy-motorola-policy)#user-role SCEngineer precedence
100
Define the role by adding appropriate values and match operators.
<DEVICE>(config-role-policy-motorola-policy-user-role-SCEngineer)#city exact
santa-clara
<DEVICE>(config-role-policy-motorola-policy-user-role-SCEngineer)#company
exact motorola
<DEVICE>(config-role-policy-motorola-policy-user-role-SCEngineer)#country
exact usa
<DEVICE>(config-role-policy-motorola-policy-user-role-SCEngineer)#title
contains engineer
<DEVICE>(config-role-policy-motorola-policy-user-role-SCEngineer)#assign
vlan-id 2
Apply role policy to an access point.
br7131-99BFA8(config-device-br7131)# use role-policy motorola-policy
Related Commands:
no Removes the upstream and/or downstream rate limits applied to this user-defined role. Also removes
the VLAN ID.