R3166-R3206-HP High-End Firewalls Access Control Command Reference-6PW101

ip ip-address: Specifies the user connections for an IP address.

mac mac-address: Specifies the user connections for a MAC address, with mac-address in the format

H-H-H.

ucibindex ucib-index: Specifies the user connection that uses the connection index. The value range from

0 to 4294967295.

user-name user-name: Specifies the user connections that use the username. The user-name argument is

a case-sensitive string of 1 to 80 characters. For a username entered without a domain name, the system

assumes that the user is in the default domain or the mandatory authentication domain.

vlan vlan-id: Specifies the user connections of a VLAN, with vlan-id ranging from 1 to 4094.

Description

Use the cut connection command to tear down the specified user connections forcibly.

This command applies to only portal, and PPP user connections.

An interface that is configured with a mandatory authentication domain treats users of the corresponding

access type as users in the mandatory authentication domain. For example, if you configure an 802.1X

mandatory authentication domain on an interface, the interface will use the domain’s AAA methods for

all its 802.1X users. To cut connections of such users, use the cut connection domain isp-name command

and specify the mandatory authentication domain.

Related commands: display connection and service-type.

Examples

# Tear down all connections of ISP domain test.

<Sysname> system-view

[Sysname] cut connection domain test

display connection

Syntax

display connection [ access-type portal | domain isp-name | interface interface-type interface-number

View

Any view

Default level

1: Monitor level

Parameters

access-type: Specifies the user connections of the specified access type.

portal: Indicates portal authentication.

domain isp-name: Specifies the user connections of an ISP domain. The isp-name argument refers to the

name of an existing ISP domain and is a case-insensitive string of 1 to 24 characters.

interface interface-type interface-number: Specifies the user connections on an interface. Only Layer 2

Ethernet interfaces is supported.

ip ip-address: Specifies the user connections of an IP address.