Cut Connection - H3C s3600 series Command Manual

Description
Use the authorization vlan command to specify an authorized VLAN for a local user. A user passing
the authentication of the local RADIUS server can access network resources in the authorized VLAN.
Use the undo authorization vlan command to remove the configuration.
By default, no authorized VLAN is specified for a local user.
For local RADIUS authentication to take effect, the VLAN assignment mode must be set to string after
you specify authorized VLANs for local users.
Examples
# Specify the authorized VLAN for local user 00-14-22-2C-AA-69 as VLAN 2.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] local-user 00-14-22-2C-AA-69
[Sysname-luser-00-14-22-2C-AA-69] authorization vlan 2

cut connection

Syntax
cut connection { all | access-type { dot1x | mac-authentication } | domain isp-name | interface
interface-type
radius-scheme-name | vlan vlan-id | ucibindex ucib-index | user-name user-name }
View
System view
Parameters
all: Cuts down all user connections.
access-type { dot1x | mac-authentication }: Cuts down user connections of a specified access type.
dot1x is used to cut down all 802.1x user connections, and mac-authentication is used to cut down all
MAC authentication user connections.
domain isp-name: Cuts down all user connections in a specified ISP domain. Here, isp-name is the
name of an ISP domain, a string of up to 128 characters. You can only specify an existing ISP domain.
interface interface-type interface-number: Cuts down all user connections under a specified port. Here,
interface-type is a port type and interface-number is a port number.
ip ip-address: Cuts down all user connections with a specified IP address.
mac mac-address: Cuts down the user connection with a specified MAC address. Here, mac-address is
in H-H-H format.
radius-scheme radius-scheme-name: Cuts down all user connections using a specified RADIUS
scheme. Here, radius-scheme-name is a string of up to 32 characters.
|
interface-number ip
|
ip-address mac
1-8
|
mac-address radius-scheme