Cut Connection - H3C S3100 Series Command Manual

Hide thumbs Also See for S3100 Series:

Table of Contents

string: Number or descriptor of the authorized VLAN for the current user, a string of 1 to 32 characters.

If it is a numeral string and there is a VLAN with the number configured, it specifies the VLAN. If it is a

numeral string but no VLAN is present with the number, it specifies the VLAN using it as the VLAN

Use the authorization vlan command to specify an authorized VLAN for a local user. A user passing

the authentication of the local RADIUS server can access network resources in the authorized VLAN.

Use the undo authorization vlan command to remove the configuration.

By default, no authorized VLAN is specified for a local user.

For local RADIUS authentication to take effect, the VLAN assignment mode must be set to string after

you specify authorized VLANs for local users.

# Specify the authorized VLAN for local user 00-14-22-2C-AA-69 as VLAN 2.

<Sysname> system-view

System View: return to User View with Ctrl+Z.

[Sysname] local-user 00-14-22-2C-AA-69

[Sysname-luser-00-14-22-2C-AA-69] authorization vlan 2

cut connection

cut connection { all | access-type { dot1x | mac-authentication } | domain isp-name | interface

interface-type interface-number | ip ip-address | ipv6 ipv6-address |

radius-scheme radius-scheme-name | vlan vlan-id | ucibindex ucib-index | user-name user-name }

all: Cuts down all user connections.

access-type { dot1x | mac-authentication }: Cuts down user connections of a specified access type.

dot1x is used to cut down all 802.1x user connections, and mac-authentication is used to cut down all

MAC authentication user connections.

domain isp-name: Cuts down all user connections in a specified ISP domain. Here, isp-name is the

name of an ISP domain, a string of up to 128 characters. You can only specify an existing ISP domain.

mac mac-address |

Table of Contents