Configuring Network Access Rights for Users When the Portal Server Is Down (Using a UCL Group)

This section provides a sample of configuring network access rights for users when the Portal server is Down (using a UCL group) using the merge method. You can also use the create method to configure network access rights for users when the Portal server is Down (using a UCL group).

**Table 1** Configuring network access rights for users when the Portal server is Down (using a UCL group)
Operation	XPATH
edit-config:merge	/huawei-nac-portal:portal-access/configure-mode/unified-mode/portal-access-profile/authorize-of-authentication-event/authorize-parameters/user-group/ucl-group

Data Requirement

**Table 2** Configuring network access rights for users when the Portal server is Down (using a UCL group)
Item	Data	Description
ucl-group	lsw_ucl	Configure network access rights for users when the Portal server is Down (using the UCL group lsw_ucl).

Request Example

<edit-config xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
  <target>
    <running/>
  </target>
  <error-option>rollback-on-error</error-option>
  <config>
    <portal-access xmlns="urn:huawei:params:xml:ns:yang:huawei-nac-portal">
      <portal-access-profile xmlns:ns0="urn:ietf:params:xml:ns:netconf:base:1.0" ns0:operation="merge">
        <name>portal_1</name>
        <authorize-of-authentication-event>
          <authentication-event>portal-server-down</authentication-event>
          <ucl-group>lsw_ucl</ucl-group>
        </authorize-of-authentication-event>
      </portal-access-profile>
    </portal-access>
    <nac-access xmlns="urn:huawei:params:xml:ns:yang:huawei-nac">
      <ucl-group xmlns:ns0="urn:ietf:params:xml:ns:netconf:base:1.0" ns0:operation="merge">
        <index>20</index>
        <name>lsw_ucl</name>
      </ucl-group>
    </nac-access>
  </config>
</edit-config>

Response Example

Sample of successful response

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="DEVICECONFIG_012824316d704d43adb16b1a4245d273">
 <ok/>
</rpc-reply>

Sample of failed response

<?xml version='1.0' encoding='UTF-8'?>
<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="42">
  <rpc-error>
    <error-app-tag>-1</error-app-tag>
    <error-message> UCL group lsw_ucl does not exist.</error-message>
    <error-info>Error on node /huawei-nac-portal:portal-access/portal-access-profile[name="portal_1"]/authorize-of-authentication-event[authentication-event="portal-server-down"]/ucl-group</error-info>
  </rpc-error>
</rpc-reply>