Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-15
# In the default ISP domain named system, configure
radius
as the authorization
scheme named rd for the login user and
loca
l as backup authorization. Note that the rd
scheme must be already configured. Related command:
radius scheme.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system] authorization login radius-scheme rd local
# In the default ISP domain named system, remove the authorization scheme for the
login user.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system] undo authorization login
1.1.14 cut connection
Syntax
cut connection
{
all
|
access-type
{
dot1x
|
mac-authentication
} |
domain
domain-name
|
interface interface-type interface-number
|
ip
ip-address
|
mac
mac-address
|
vlan
vlan-id
|
ucibindex ucib-index
|
user-name user-name
}
View
System view
Parameter
all
: Cuts down all user connections.
access-type
{
dot1x
|
mac-authentication
}: Cuts down user connections using the
specified access method.
dot1x
is used to cut down all 802.1x user connections, and
mac-authentication
is used to cut down all MAC authentication user connections.
domain
isp-name
: Cuts down all user connections in the specified ISP domain. Where,
isp-name
is the name of an ISP domain. It is a character string of up to 24 characters.
You can only specify an existing ISP domain.
interface
interface-type interface-number
: Cuts down all user connections under the
specified port. Where
interface-type
is the port type and
interface-number
is the port
number.
ip
ip-address
: Cuts down the connection of the user with the specified IP address.
mac
mac-address
: Cuts down the user connection with the specified MAC address.
Where,
mac-address
is in the
H-H-H
format.
vlan
vlan-id
: Cuts down all user connections of the specified VLAN. Where,
vlan-id
ranges from 1 to 4094.
