H3C S7500 Series Ethernet Switches Command Manual

Table Of Contents
Command Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-3
Note that, if the user is bound to a remote port, make sure you specify the nas-ip
keyword. If the user is bound to a local port, you need not specify the nas-ip keyword.
Note:
If the accounting optional switch is turned on (with the accounting optional command)
in the ISP domain to which the local user belongs or the RADIUS scheme referenced
by the ISP, you cannot limit the number of accesses by the local user. That is, in such a
case, the attribute access-limit command does not take effect.
Related commands: display local-user.
Examples
# Set the IP address of aabbcc to 10.110.50.1.
<H3C>system-view
System View: return to User View with Ctrl+Z.
[H3C] local-user aabbcc
[H3C-luser-aabbcc] attribute ip 10.110.50.1
1.1.3 cut connection
Syntax
cut connection { all | access-type dot1x | domain domain-name | interface
interface-type interface-number | ip ip-address | mac mac-address | radius-scheme
radius-scheme-name | vlan vlan-id | ucibindex ucib-index | user-name user-name }
View
System view
Parameters
all: Cuts down all user connections
access-type dot1x: Cuts down all 802.1x user connections.
domain isp-name: Cuts down all user connections in the specified ISP domain.
isp-name is the name of an ISP domain. It is a string of up to 24 characters. You can
only specify an existing ISP domain.
interface interface-type interface-number: Cuts down all user connections to the
specified port.
ip ip-address: Cuts down the connection of the user with the specified IP address.