HP VPN Firewall Appliances Access Control Command Reference

158
Usage guidelines
This command does not display information about FTP user connections.
With no parameter specified, this command displays brief information about all AAA user connections.
If you specify the ucibindex ucib-index option, this command displays detailed information. Otherwise,
this command displays brief information.
If an interface is configured with a mandatory authentication domain, the device uses the mandatory
authentication domain to perform authentication, authorization, and accounting for users who access the
interface through the specified access type. To display connections of such users, use the display
connection domain isp-name command and specify the mandatory authentication domain.
How the device displays the username of a user on an interface configured with a mandatory
authentication domain depends on the format of the username entered by the user at login:
• If the username does not contain the at sign (@), the device displays the username in the format
username@mandatory authentication domain name.
• If the username contains the at sign (@), the device displays the entered username. For example, if
a user entered the username aaa@123 at login and the name of the mandatory authentication
domain is dom, the device displays the username aaa@123, rather than aaa@123@dom.
Examples
# Display information about all AAA user connections.
<Sysname> display connection
Index=1 ,Username=telnet@system
IP=10.0.0.1
Total 1 connection(s) matched.
# Display information about AAA user connections using the index of 0.
<Sysname> display connection ucibindex 0
Index=0 , Username=telnet@system
IP=10.0.0.1
IPv6=N/A
Access=Admin ,AuthMethod=PAP
Port Type=Virtual ,Port Name=N/A
Initial VLAN=999, Authorized VLAN=20
ACL Group=Disable
CAR=Disable
Priority=Disable
SessionTimeout=60(s), Terminate-Action=Radius-Request
Start=2009-07-16 10:53:03 ,Current=2009-07-16 10:57:06 ,Online=00h04m03s
Total 1 connection matched.
Table 36 Command output
Field Descri
p
tion
Username Username of the connection, in the format username@domain.
IP IPv4 address of the user.
IPv6 IPv6 address of the user.
Access User access type.