ZyXEL Communications UAG Series - MAC Auth Commands

Chapter 44 User/Group
UAG CLI Reference Guide
228
44.2.3.1 User Setting Command Examples
The following commands show the current settings for the number of simultaneous logins.
44.2.4 MAC Auth Commands
This table lists the commands for mappings MAC addresses to MAC address user accounts.
[no] users simultaneous-logon {administration
| access | billing-account} enforce
Enables the limit on the number of simultaneous logins by users of
the specified account-type. The
no command disables the limit, or
allows an unlimited number of simultaneous logins.
[no] users simultaneous-logon {administration
| access | billing-account} limit
login_number
Sets the limit for the number of simultaneous logins by users of the
specified account-type. The
no command sets the limit to one.
login_number: The maximum number of simultaneous logins by
each user. 1 - X where X is the highest number of simultaneous
logins the UAG model supports.
show users update-lease-settings Displays whether or not access users can automatically renew their
lease time.
[no] users update-lease automation Lets users automatically renew their lease time. The
no command
prevents them from automatically renewing it.
show users idle-detection-settings Displays whether or not users are automatically logged out, and, if
so, how many minutes of idle time must pass before they are
logged out.
[no] users idle-detection Enables logging users out after a specified number of minutes of
idle time. The
no command disables logging them out.
[no] users idle-detection timeout <1..60> Sets the number of minutes of idle time before users are
automatically logged out. The
no command sets the idle-detection
timeout to three minutes.
Table 141 username/groupname Commands Summary: Settings (continued)
COMMAND DESCRIPTION
Router# configure terminal
Router(config)# show users simultaneous-logon-settings
enable simultaneous logon limitation for administration account: yes
maximum simultaneous logon per administration account : 1
enable simultaneous logon limitation for access account : yes
maximum simultaneous logon per access account : 3
Table 142 mac-auth Commands Summary
COMMAND DESCRIPTION
[no] mac-auth database mac mac_address type ext-mac-
address mac-role username description description
Maps the specified MAC address authenticated by an
external server to the specified MAC role (MAC address
user account).
The
no command deletes the mapping between the MAC
address and the MAC role.
[no] mac-auth database mac mac_address type int-mac-
address mac-role username description description
Maps the specified MAC address authenticated by the
UAG’s local user database to the specified MAC role (MAC
address user account).
The
no command deletes the mapping between the MAC
address and the MAC role.