Command Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
Huawei Technologies Proprietary
1-7
By default, no separate authorization scheme is configured.
Related command: scheme and radius scheme, hwtacacs scheme.
Example
# Allow users in current ISP domain to access the network services without being
authorized.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] domain aabbcc.net
New Domain added.
[Quidway-isp-aabbcc.net] authorization none
1.1.7 cut connection
Syntax
cut connection { all | access-type { dot1x | mac-authentication } | domain
isp-name | interface interface-type interface-number | ip ip-address | mac
mac-address | radius-scheme radius-scheme-name | vlan vlan-id | ucibindex
ucib-index | user-name user-name }
View
System view
Parameter
all: Cuts down all user connections.
access-type { dot1x | mac-authentication }: Cuts down user connections using the
specified access method. dot1x is used to cut down all 802.1x user connections, and
mac-authentication is used to cut down all MAC authentication user connections.
domain isp-name: Cuts down all user connections in the specified ISP domain.
Where, isp-name is the name of an ISP domain. It is a character string of up to 24
characters. You can only specify an existing ISP domain.
interface interface-type interface-number: Cuts down all user connections under the
specified port. Where interface-type is the port type and interface-number is the port
number.
ip ip-address: Cuts down the connection of the user with the specified IP address.
mac mac-address: Cuts down the user connection with the specified MAC address.
Where, mac-address is in the H-H-H format.
radius-scheme radius-scheme-name: Cuts down all user connections using the
specified RADIUS scheme. Where, radius-scheme-name is a character string of up to
32 characters.
To Next Page
Loading...
Need help?
General