AAA Configuration Commands 361
access-type { dot1x | gcm | mac authentication }: Configures to cut a
category of connections according to logon type.
dot1x means the 802.1x users.
gcm means gcm user. mac authentication means the centralized MAC address
authentication users.
domain
domain-name
: Configures to cut the connection according to ISP domain.
domain-name
specifies the ISP domain name with a character string not exceeding
24 characters. The specified ISP domain shall have been created.
mac
mac-address
: Configures to cut the connection of the supplicant whose
MAC address is
mac-address
. The argument
mac-address
is in the hexadecimal
format (H-H-H).
radius-scheme
radius-scheme-name
: Configures to cut the connection
according to RADIUS server name.
radius-scheme-name
specifies the RADIUS
server name with a character string not exceeding 32 characters.
interface
interface-type interface-number
: Configures to cut the
connection according to the port.
ip
ip-address
: Configures to cut the connection according to IP address. The
argument
ip-address
is in the hexadecimal format (ip-address).
vlan
vlanid
: Configures to cut the connection according to VLAN ID. Here,
vlanid ranges from 1 to 4094.
ucibindex
ucib-index
: Configures to cut the connection according to
ucib-index
. Here,
ucib-index
ranges from 0 to 4095.
user-name
user-name
: Configures to cut the connection according to user name.
user-name
is the argument specifying the username. It is a character string not
exceeding 80 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @
character can only be used once in one username. The pure username (the part
before @, namely the user ID) cannot exceed 55 characters.
Description
Use the cut connection command to disconnect a user or a category of users by
force.
Related command: display connection.
Example
To cut all the connections in the ISP domain, marlboro.net, enter the following:
<SW5500> system-view
System View: return to User View with Ctrl+Z.
[SW5500]cut connection domain marlboro.net
display connection Syntax
display connection [ access-type { dot1x | mac-authentication } |
domain
domain-name
| interface
interface-type interface-number
| ip
ip-address
| mac
mac-address
| radius-scheme
radius-scheme-name
|
vlan
vlanid
| ucibindex
ucib-index
| user-name
user-name
]