28
ip ip-address: Specifies the IP address of the user. This keyword and argument combination is applicable
to 802.1X users only.
location: Specifies the port binding attribute of the user. This keyword and argument combination is
applicable to LAN users only.
port slot-number subslot-number port-number: Specifies the port to which the user is bound. The slot-
number argument is in the range 0 to 255, the subslot-number argument is in the range 0 to 15 , and the
port-number argument is in the range 0 to 255. Only the numbers make sense here; port types are not
taken into account. This keyword and argument combination is applicable to only LAN users.
mac mac-address: Specifies the MAC address of the user in the format H-H-H. This keyword and argument
combination is applicable to LAN users only.
vlan vlan-id: Specifies the VLAN to which the user belongs. The vlan-id argument is in the range 1 to
4094. This keyword and argument combination is applicable to LAN users only.
Description
Use the bind-attribute command to configure binding attributes for a local user.
Use the undo bind-attribute command to remove binding attributes of a local user.
By default, no binding attribute is configured for a local user.
Binding attributes are checked upon authentication of a local user. If the binding attributes of a local user
do not match the configured ones, the user will fail the checking and the authentication.
Binding attribute checking does not take the service types of the users into account. A configured binding
attribute is effective for all types of users. Be cautious when deciding which binding attributes should be
configured for which type of local users. For example, an IP address binding is applicable to only 802.1X
authentication that supports IP address upload. If you configure an IP address binding for an
authentication method that does not support IP address upload, for example, MAC authentication, the
local authentication will fail.
Examples
# Configure the bound IP of local user abc as 3.3.3.3.
<Sysname> system-view
[Sysname] local-user abc
[Sysname-luser-abc] bind-attribute ip 3.3.3.3
display local-user
Syntax
display local-user [ idle-cut { disable | enable } | service-type { ftp | lan-access | portal | ssh | telnet |
terminal } | state { active | block } | user-name user-name | vlan vlan-id ] [ slot slot-number ] [ | { begin
| exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
idle-cut { disable | enable }: Specifies local users with the idle cut function disabled or enabled.
service-type: Specifies the local users that use a specified type of service.
To Next Page
Loading...
Need help?
General
