Force-Logout - H3C MSR Series Command Reference Manual

Syntax
filter web-access uri-acl uri-acl-name
undo filter web-access uri-acl
Default
Users can access only the Web resources authorized to them through the URL list.
Views
SSL VPN policy group view
Predefined user roles
network-admin
Parameters
uri-acl-name: Specifies a URI ACL by its name, a case-insensitive string of 1 to 31 characters. The
specified URI ACL must already exist.
Usage guidelines
The SSL VPN gateway uses the following procedure to determine whether to forward a Web access
request:
1. Matches the request against the authorized URL list.
If the request matches a URL entry in the list, the gateway forwards the request.

If the request does not match any URL entries in the list, the gateway proceeds to step 2.

2. Matches the request against rules in the URI ACL:
If the request matches a permit rule, the gateway forwards the request.

If the request matches a deny rule, the gateway drops the request.

If the request does not match any rules in the URI ACL or if no URI ACL is available, the

gateway proceeds to step 3.
3. Matches the request against rules in the advanced ACL:
If the request matches a permit rule, the gateway forwards the request.

If the request matches a deny rule, the gateway drops the request.

If the request does not match any rules in the advanced ACL or if no advanced ACL is

available, the gateway drops the request.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure policy group abcpg to use URI ACL abcuriacl1 for Web access filtering.
<Sysname> system-view
[Sysname] sslvpn context abc
[Sysname-sslvpn-context-abc] policy-group abcpg
[Sysname-sslvpn-context-abc-policy-group-abcpg] filter web-access uri-acl abcuriacl
Related commands
filter web-access acl

force-logout

Use force-logout to force online users to log out.
Syntax
force-logout [ all | session session-id | user user-name ]
762