R3303-HP HSR6800 Routers Security Command Reference

26
ucibindex ucib-index: Specifies the user connection that uses the connection index, in the range of 0 to
4294967295.
user-name user-name: Specifies the user connections that use the username. The user-name argument is
a case-sensitive string of 1 to 80 characters. For a username entered without a domain name, the system
assumes that the user is in the default domain name or the mandatory authentication domain.
slot slot-number: Specifies a card by its slot number. The slot-number argument represents the slot number
of the card. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number
argument represents the member ID of the IRF member device, and the slot-number argument represents
the slot number of the card. (In IRF mode.)
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Usage guidelines
This command does not display information about FTP user connections.
With no parameter specified, this command displays brief information about all AAA user connections.
If you specify the ucibindex ucib-index option, this command displays detailed information. Otherwise,
this command displays brief information.
If an interface is configured with a mandatory authentication domain (for example, an 802.1X
mandatory authentication domain), the device uses the mandatory authentication domain to perform
authentication, authorization, and accounting for users who access the interface through the specified
access type. To display connections of such users, use the display connection domain isp-name
command and specify the mandatory authentication domain.
How the device displays the username of a user on an interface configured with a mandatory
authentication domain depends on the format of the username entered by the user at login:
• If the username does not contain the at sign (@), the device displays the username in the format
username@mandatory authentication domain name.
• If the username contains the at sign (@), the device displays the entered username. For example, if
a user entered the username aaa@123 at login and the name of the mandatory authentication
domain is dom, the device displays the username aaa@123, rather than aaa@123@dom.
For 802.1X users whose usernames use a forward slash (/) or backward slash (\) as the domain name
delimiter, you cannot query the connections by username. For example, the display connection
user-name aaa\bbb command cannot display the connections of the user aaa\bbb.
Examples
# Display information about all AAA user connections.
<Sysname> display connection
Slot: 0
Index=0 , Username=telnet@system
IP=10.0.0.1
IPv6=N/A