R3303-HP HSR6800 Routers Security Command Reference

25
its 802.1X users. To cut connections of such users, use the cut connection domain isp-name command,
and specify the mandatory authentication domain.
Examples
# Tear down all connections of ISP domain test.
<Sysname> system-view
[Sysname] cut connection domain test
Related commands
• display connection
• service-type
display connection
Use display connection to display information about AAA user connections.
Syntax
In standalone mode:
display connection [ access-type { dot1x | mac-authentication | portal } | domain isp-name | interface
interface-type interface-number | ip ip-address | mac mac-address | ucibindex ucib-index | user-name
user-name ] [ slot slot-number ] [ | { begin | exclude | include } regular-expression ]
In IRF mode:
display connection [ access-type { dot1x | mac-authentication | portal } | domain isp-name | interface
interface-type interface-number | ip ip-address | mac mac-address | ucibindex ucib-index | user-name
user-name ] [ chassis chassis-number slot slot-number ] [ | { begin | exclude | include }
regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
access-type: Specifies the user connections of the specified access type.
• dot1x: Indicates 802.1X authentication. This keyword is supported only on the SAP interface
modules that are operating in Layer 2 mode.
• mac-authentication: Indicates MAC address authentication. This keyword is supported only on the
SAP interface modules that are operating in Layer 2 mode.
• portal: Indicates portal authentication.
domain isp-name: Specifies the user connections of an ISP domain. The isp-name argument represents
the name of an existing ISP domain and is a case-insensitive string of 1 to 24 characters.
interface interface-type interface-number: Specifies the user connections on an interface. Only Layer 2
Ethernet interfaces are supported.
ip ip-address: Specifies the user connections of an IP address.
mac mac-address: Specifies the user connections of a MAC address, with mac-address in the format
H-H-H.