HPE FlexNetwork HSR6800 Security Command Reference page 38

Hide thumbs Also See for FlexNetwork HSR6800:
Table of Contents

Advertisement

If an interface is configured with a mandatory authentication domain (for example, an 802.1X
mandatory authentication domain), the device uses the mandatory authentication domain to perform
authentication, authorization, and accounting for users who access the interface through the
specified access type. To display connections of such users, use the display connection domain
isp-name command and specify the mandatory authentication domain.
How the device displays the username of a user on an interface configured with a mandatory
authentication domain depends on the format of the username entered by the user at login:
If the username does not contain the at sign (@), the device displays the username in the
format username@mandatory authentication domain name.
If the username contains the at sign (@), the device displays the entered username. For
example, if a user entered the username aaa@123 at login and the name of the mandatory
authentication domain is dom, the device displays the username aaa@123, rather than
aaa@123@dom.
For 802.1X users whose usernames use a forward slash (/) or backward slash (\) as the domain
name delimiter, you cannot query the connections by username. For example, the display
connection user-name aaa\bbb command cannot display the connections of the user aaa\bbb.
Examples
# Display information about all AAA user connections.
<Sysname> display connection
Slot:
0
Index=0
, Username=telnet@system
IP=10.0.0.1
IPv6=N/A
Total 1 connection(s) matched on slot 0.
Total 1 connection(s) matched.
# Display information about AAA user connections using the index of 0.
<Sysname> display connection ucibindex 0
Slot:
0
Index=0
, Username=telnet@system
IP=10.0.0.1
IPv6=N/A
Access=Admin
Port Type=Virtual ,Port Name=N/A
ACL Group=Disable
User Profile=N/A
CAR=Disable
Priority=Disable
SessionTimeout=60(s), Terminate-Action=Radius-Request
Start=2009-07-16 10:53:03 ,Current=2009-07-16 10:57:06 ,Online=00h04m03s
Total 1 connection matched.
Slot:
1
Total 0 connection matched.
Slot:
2
Total 0 connection matched.
# On the IRF fabric, display information about AAA user connections using the index of 0.
<Sysname> display connection ucibindex 0
Chassis 1 slot:
Index=0
, Username=telnet@system
,AuthMethod=PAP
0
25

Advertisement

Table of Contents
loading

Table of Contents