R3204P16-HP Load Balancing Module Security Command Reference-6PW101

73
Description
Use the bind-attribute command to configure binding attributes for a local user.
Use the undo bind-attribute command to remove binding attributes of a local user.
By default, no binding attribute is configured for a local user.
Binding attributes are checked upon authentication of a local user. If the binding attributes of a local user
do not match the configured ones, the checking will fail and the user will fail the authentication as a result.
In addition, such binding attribute checking does not take the service types of the users into account. That
is, a configured binding attribute is effective on all types of users. Therefore, be cautious when deciding
which binding attributes should be configured for which type of local users.
The bind-attribute ip command applies only when the authentication method (802.1X, for example)
supports IP address upload. If you configure the command when the authentication method (MAC
address authentication, for example) does not support IP address upload, local authentication will fail.
The bind-attribute mac command applies to only LAN users, for example, 802.1X users. If you configure
it for other types of users, such as FTP or Telnet users, local authentication of the users will fail.
Examples
# Configure the bound IP of local user abc as 3.3.3.3.
<Sysname> system-view
[Sysname] local-user abc
[Sysname-luser-abc] bind-attribute ip 3.3.3.3
cut connection
Syntax
cut connection { all | domain isp-name | interface interface-type interface-number | ip ip-address | mac
mac-address | ucibindex ucib-index | user-name user-name | vlan vlan-id }
View
System view
Default level
2: System level
Parameters
all: Specifies all user connections.
domain isp-name: Specifies all user connections of an ISP domain. The isp-name argument refers to the
name of an existing ISP domain and is a string of 1 to 24 characters.
interface interface-type interface-number: Specifies user connections on an interface by the interface
type and number. Currently, only Layer 2 Ethernet interfaces are supported.
ip ip-address: Specifies the user connections of an IP address.
mac mac-address: Specifies the user connections of a MAC address, with mac-address in the format of
H-H-H.
ucibindex ucib-index: Specifies a user connection by connection index. The value range is from 0 to
4294967295.