4000 Router Series Security Command Reference

When you configure binding attributes for a local user, make sure the device can obtain from the user's

packet all attributes for checking. For example, you can configure an IP address binding for an 802.1X

user, because 802.1X authentication can include the user's IP address in the packet. However, you

cannot configure IP address bindings for MAC authentication users, because MAC authentication does

not use IP addresses.

Examples

# Bind IP address 3.3.3.3 with the network access user abc.

<Sysname> system-view

[Sysname] local-user abc class network

[Sysname-luser-network-abc] bind-attribute ip 3.3.3.3

Related commands

display local-user

Use display local-user to display the local user configuration and online user statistics.

Syntax

display local-user [ class { manage | network } | idle-cut { disable | enable } | service-type { ftp |

lan-access | portal | ppp | ssh | telnet | terminal } | state { active | block } | user-name user-name |

vlan vlan-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

class: Specifies the local user type.

• manage: Device management user.

• network: Network access user.

idle-cut { disable | enable }: Specifies local users with the idle cut function disabled or enabled.

service-type: Specifies the local users who use a specified type of service.

• ftp: FTP users.

• lan-access: LAN users, mainly users accessing the network through an Ethernet, such as 802.1X

users.

• portal: Portal users.

• ppp: PPP users.

• ssh: SSH users.

• telnet: Telnet users.

• terminal: Terminal users who log in through console, AUX, or async ports.

state { active | block }: Specifies local users in active or blocked state. A local user in active state can

access network services, but a local user in blocked state cannot.