HP VPN Firewall Appliances Access Control Command Reference

156
Related commands
• authorization default
• radius scheme
cut connection
Use cut connection to tear down the specified user connections forcibly.
Syntax
cut connection { access-type portal | all | domain isp-name | interface interface-type interface-number
| ip ip-address | mac mac-address | ucibindex ucib-index | user-name user-name | vlan vlan-id }
Views
System view
Default command level
2: System level
Parameters
access-type portal: Specifies portal authentication as the access type.
all: Specifies all user connections.
domain isp-name: Specifies the user connections of an ISP domain. The isp-name argument represents
the name of an existing ISP domain and is a string of 1 to 24 characters.
interface interface-type interface-number: Specifies the user connections on an interface. Only Layer 2
Ethernet interfaces are supported.
ip ip-address: Specifies the user connections for an IP address.
mac mac-address: Specifies the user connections for a MAC address, with mac-address in the format
H-H-H.
ucibindex ucib-index: Specifies the user connection that uses the connection index. The value range is 0
to 4294967295.
user-name user-name: Specifies the user connections that use the username. The user-name argument is
a case-sensitive string of 1 to 80 characters. For a username entered without a domain name, the system
assumes that the user is in the default domain or the mandatory authentication domain.
vlan vlan-id: Specifies the user connections of a VLAN. The value range for the vlan-id argument is 1 to
4094.
Usage guidelines
This command applies only to portal and PPP user connections.
For users whose usernames carry the version number or contain spaces, you cannot cut the connections
by username.
An interface that is configured with a mandatory authentication domain treats users of the corresponding
access type as users in the mandatory authentication domain. For example, if you configure a
mandatory authentication domain on an interface, the interface uses the domain's AAA methods for all
users.
Examples
# Tear down all connections of ISP domain test.