F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

163
interface through the specified access type. To display connections of such users, use the display
connection domain isp-name command and specify the mandatory authentication domain.
How the device displays the username of a user on an interface configured with a mandatory
authentication domain depends on the format of the username entered by the user at login:
• If the username does not contain the at sign (@), the device displays the username in the format
username@mandatory authentication domain name.
• If the username contains the at sign (@), the device displays the entered username. For example, if
a user entered the username aaa@123 at login and the name of the mandatory authentication
domain is dom, the device displays the username aaa@123, rather than aaa@123@dom.
Examples
# Display information about all AAA user connections.
<Sysname> display connection
Index=1 ,Username=telnet@system
IP=10.0.0.1
Total 1 connection(s) matched.
# Display information about AAA user connections using the index of 0.
<Sysname> display connection ucibindex 0
Index=0 , Username=telnet@system
IP=10.0.0.1
IPv6=N/A
Access=Admin ,AuthMethod=PAP
Port Type=Virtual ,Port Name=N/A
Initial VLAN=999, Authorized VLAN=20
ACL Group=Disable
CAR=Disable
Priority=Disable
SessionTimeout=60(s), Terminate-Action=Radius-Request
Start=2009-07-16 10:53:03 ,Current=2009-07-16 10:57:06 ,Online=00h04m03s
Total 1 connection matched.
Table 36 Command output
Field Descri
p
tion
Username Username of the connection, in the format username@domain.
IP IPv4 address of the user.
IPv6 IPv6 address of the user.
Access User access type.
ACL Group
Authorization ACL group. When no authorization ACL group is assigned, this
field displays Disable.
CAR(kbps) Authorized CAR parameters.
SessionTimeout
Session timeout value received from the server, in seconds. The value indicates:
• The remaining online time of the user if Terminate-Action is Default.
• The re-authentication interval for the user if Terminate-Action is
Radius-Request.