22
Views
ISP domain view
Default command level
3: Manage level
Parameters
profile-name
: Name of the user profile, a case-sensitive string of 1 to 31 characters. For more
information about user profile configuration, see
Security Configuration Guide
.
Usage guidelines
After a user of an ISP domain passes authentication, if the server (or the access device in the case of
local authentication) does not authorize any user profile to the ISP domain, the system uses the user
profile specified by the
authorization-attribute user-profile
command as that of the ISP domain.
If you configure the
authorization-attribute user-profile
command multiple times, the most recent
configuration takes effect.
Examples
# Specify the default authorization user profile for domain
test
as
profile1
.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization-attribute user-profile profile1
cut connection
Use
cut connection
to tear down the specified user connections.
Syntax
In standalone mode:
cut connection
{
access-type
{
dot1x
|
mac-authentication
|
portal
} |
all
|
domain
isp-name
|
interface
interface-type interface-number
|
ip
ip-address
|
mac
mac-address
|
ucibindex
ucib-index
|
user-name
user-name
} [
slot
slot-number
]
In IRF mode:
cut connection
{
access-type
{
dot1x
|
mac-authentication
|
portal
} |
all
|
domain
isp-name
|
interface
interface-type interface-number
|
ip
ip-address
|
mac
mac-address
|
ucibindex
ucib-index
|
user-name
user-name
} [
chassis
chassis-number
slot
slot-number
]
Views
System view
Default command level
2: System level
Parameters
access-type
: Specifies the user connections of the specified access type.
•
dot1x
: Indicates 802.1X authentication. This keyword is supported only on the SAP interface
modules that are operating in Layer 2 mode.
•
mac-authentication
: Indicates MAC address authentication. This keyword is supported only
on the SAP interface modules that are operating in Layer 2 mode.
•
portal
: Indicates portal authentication.
all
: Specifies all user connections.
