R2511-HP MSR Router Series Security Command Reference(V5)

33
If you specify the ucibindex ucib-index option, this command displays detailed information. Otherwise,
this command displays brief information.
If an interface is configured with a mandatory authentication domain (for example, an 802.1X
mandatory authentication domain), the device uses the mandatory authentication domain to perform
authentication, authorization, and accounting for users who access the interface through the specified
access type. To display connections of such users, use the display connection domain isp-name
command and specify the mandatory authentication domain.
How the device displays the username of a user on an interface configured with a mandatory
authentication domain depends on the format of the username entered by the user at login:
• If the username does not contain the at sign (@), the device displays the username in the format
username@mandatory authentication domain name.
• If the username contains the at sign (@), the device displays the entered username. For example, if
a user entered the username aaa@123 at login and the name of the mandatory authentication
domain is dom, the device displays the username aaa@123, rather than aaa@123@dom.
For 802.1X users whose usernames use a forward slash (/) or backward slash (\) as the domain name
delimiter, you cannot query the connections by username. For example, the display connection
user-name aaa\bbb command cannot display the connections of the user aaa\bbb.
Examples
# Display information about all AAA user connections.
<Sysname> display connection
Index=1 ,Username=telnet@system
IP=10.0.0.1
IPv6=N/A
Total 1 connection(s) matched.
Table 1 Command output
Field Descri
p
tion
Username Username of the connection, in the format username@domain.
IP IPv4 address of the user.
IPv6 IPv6 address of the user.
Related commands
cut connection
display domain
Use display domain to display the configuration of ISP domains.
Syntax
display domain [ isp-name ] [ | { begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level