3com 8807 참조 가이드
AAA Configuration Commands
311
nas-ip ip-address: IP address of the access server in the event of binding a remote
port with a user. The argument ip-address is an IP address in dotted decimal
format and defaults to 127.0.0.1 (which represents the local machine).
port with a user. The argument ip-address is an IP address in dotted decimal
format and defaults to 127.0.0.1 (which represents the local machine).
port portnum: Sets the port with which a user is bound. The argument portnum is
represented by "SlotNumber SubSlotNumber PortNumber". If the bound port has
no SubSlotNumber, the value 0 can be used as the SubSlotNumber.
represented by "SlotNumber SubSlotNumber PortNumber". If the bound port has
no SubSlotNumber, the value 0 can be used as the SubSlotNumber.
n
When you are setting a port with which you are bound, this setting takes effect
only when the slot number, the subslot number and the port number exist.
only when the slot number, the subslot number and the port number exist.
Description
Use the attribute command to configure some attributes for specified local user.
Use the undo attribute command to cancel the attributes that have been defined
for this local user.
for this local user.
As for attributes of the users that are of local LAN service type, user IP address and
MAC address attribute are valid only when the ISP domain authentication scheme
is a local authentication scheme, or the ISP domain authentication scheme is a
RADIUS authentication scheme and the type of the RADIUS scheme is 3COM.
MAC address attribute are valid only when the ISP domain authentication scheme
is a local authentication scheme, or the ISP domain authentication scheme is a
RADIUS authentication scheme and the type of the RADIUS scheme is 3COM.
It should be noted that the argument nas-ip must be defined for a user bound
with a remote port, which is unnecessary, however, in the event of a user bound
with a local port.
with a remote port, which is unnecessary, however, in the event of a user bound
with a local port.
Related command: display local-user.
Example
# Configure the IP address 10.110.50.1 to the user 3com1.
[3Com-luser-3com1] attribute ip 10.110.50.1
cut connection
Syntax
cut connection { all | access-type { dot1x | gcm | mac-authentication } |
domain domain-name | interface interface-type interface-num | ip ip-address |
mac mac-address | radius-scheme radius-scheme-name | vlan vlanid | ucibindex
ucib-index | user-name user-name }
domain domain-name | interface interface-type interface-num | ip ip-address |
mac mac-address | radius-scheme radius-scheme-name | vlan vlanid | ucibindex
ucib-index | user-name user-name }
View
System view
Parameter
all : Configures to disconnect all connection.
access-type dot1x: Configures to disconnect the user connections that are of
specified access category.
specified access category.
dot1x: Specifies 802.1x users.
gcm: Specifies GCM users.
mac-authentication: Specifies users authenticated by MAC addresses.