17
An interface that is configured with a mandatory authentication domain treats users of the corresponding
access type as users in the mandatory authentication domain. For example, if you configure an 802.1X
mandatory authentication domain on an interface, the interface will use the domain’s AAA methods for
all its 802.1X users. To cut connections of such users, use the cut connection domain isp-name command
and specify the mandatory authentication domain.
Related commands: display connection and service-type.
Examples
# Tear down all connections of ISP domain test.
<Sysname> system-view
[Sysname] cut connection domain test
display connection
Syntax
display connection [ access-type { dot1x | mac-authentication | portal } | domain isp-name | interface
interface-type interface-number | ip ip-address | mac mac-address | ucibindex ucib-index | user-name
user-name | vlan vlan-id ] [ slot slot-number ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
access-type: Specifies the user connections of the specified access type.
ï‚· dot1x: Indicates 802.1X authentication.
ï‚· mac-authentication: Indicates MAC address authentication.
ï‚· portal: Indicates portal authentication.
domain isp-name: Specifies all user connections of an ISP domain. The isp-name argument refers to the
name of an existing ISP domain and is a case-insensitive string of 1 to 24 characters.
interface interface-type interface-number: Specifies user connections on an interface by the interface type
and number.
ip ip-address: Specifies the user connections of an IP address.
mac mac-address: Specifies the user connections of a MAC address, with mac-address in the format H-H-
H.
ucibindex ucib-index: Specifies all user connections using the specified connection index. The value
ranges from 0 to 4294967295.
user-name user-name: Specifies the user connections that use the username. The user-name argument is a
case-sensitive string of 1 to 80 characters. For a username entered without a domain name, the system
assumes that the user is in the default domain name or the mandatory authentication domain.
vlan vlan-id: Specifies user connections of a VLAN, with vlan-id ranging from 1 to 4094.
slot slot-number: Specifies the member number of the switch in the IRF fabric, which you can display with
the display irf command. The value range for the slot-number argument depends on the number of
members and numbering conditions in the current IRF fabric. If no IRF fabric exists, the slot-number
argument is the current device number.
To Next Page
Loading...
Need help?
General
