HP E4510-48G, Command Reference Manual

Page: 631 / 1334

1-16
Use the undo bind-attribute command to remove binding attributes of a local user.
By default, no binding attribute is configured for a local user.
Note that:
z
Binding attributes are checked upon authentication of a local user. If the binding attributes of a
local user do not match the configured ones, the checking will fail and the user will fail the
authentication as a result. In addition, such binding attribute checking does not take the service
types of the users into account. That is, a configured binding attribute is effective on all types of
users. Therefore, be cautious when deciding which binding attributes should be configured for
which type of local users.
z
The bind-attribute ip command applies only when the authentication method (802.1X, for
example) supports IP address upload. If you configure the command when the authentication
method (MAC address authentication, for example) does not support IP address upload, local
authentication will fail.
z
The bind-attribute mac command applies to only LAN users, for example, 802.1X users. If you
configure it for other types of users, such as FTP or Telnet users, local authentication of the users
will fail.
Examples
# Configure the bound IP of local user abc as 3.3.3.3.
<Sysname> system-view
[Sysname] local-user abc
[Sysname-luser-abc] bind-attribute ip 3.3.3.3
cut connection
Syntax
cut connection { access-type { dot1x | mac-authentication } | all | domain isp-name | interface
interface-type interface-number | ip ip-address | mac mac-address | ucibindex ucib-index |
user-name user-name | vlan vlan-id } [ slot slot-number ]
View
System view
Default Level
2: System level
Parameters
access-type : Specifies user connections of an access mode.
z
dot1x : Specifies 802.1x authentication user connections.
z
mac-authentication : Specifies MAC authentication user connections.
all : Specifies all user connections.
domain isp-name : Specifies all user connections of an ISP domain. The isp-name argument refers to
the name of an existing ISP domain and is a string of 1 to 24 characters.
interface interface-type interface-number : Specifies all user connections of an interface.
ip ip-address : Specifies a user connection by IP address.