- Table of Contents
-
- 11-Security Command Reference
- 00-Preface
- 01-Security zone commands
- 02-AAA commands
- 03-Portal commands
- 04-User profile commands
- 05-Password control commands
- 06-Keychain commands
- 07-Public key management commands
- 08-PKI commands
- 09-IPsec commands
- 10-Group domain VPN commands
- 11-SSH commands
- 12-SSL commands
- 13-SSL VPN commands
- 14-ASPF commands
- 15-APR commands
- 16-Session management commands
- 17-Connection limit commands
- 18-Object group commands
- 19-Object policy commands
- 20-Attack detection and prevention commands
- 21-IP source guard commands
- 22-ARP attack protection commands
- 23-ND attack defense commands
- 24-uRPF commands
- 25-Crypto engine commands
- 26-FIPS commands
- Related Documents
-
Title | Size | Download |
---|---|---|
04-User profile commands | 42.22 KB |
User profile commands
display user-profile
Use display user-profile to display configuration and online user information for user profiles.
Syntax
In standalone mode:
display user-profile [ session-group ] [ name profile-name ]
In IRF mode:
display user-profile [ session-group ] [ name profile-name ] [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
session-group: Specifies a session group profile.
name profile-name: Specifies a user profile by its name, a case-sensitive string of 1 to 31 characters. Valid characters include English letters, digits, and underscores (_). The name must start with an English letter and must be unique. If you do not specify this option, the command displays configuration and online user information for all user profiles.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays user profile configuration and online user information for all member devices. (In IRF mode.)
Examples
# Display configuration and online user information for user profile aaa.
<Sysname> display user-profile name aaa
User-Profile: aaa
Inbound:
CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
Policy: p1
Outbound:
CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
User user_1:
Authentication type: Portal
Network attributes:
Interface : GigabitEthernet1/0
MAC address : 0000-1111-2222
Failed action list:
Inbound: Policy p1
Inbound: CIR 64 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
# Display configuration and online user information for all session group profiles.
<Sysname> display user-profile session-group
Session-Group-Profile: aaa
Outbound:
CIR 64 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
QMProfile: a
User user_1:
Authentication type: Portal
Network attributes:
Interface : GigabitEthernet1/0
MAC address : 0000-1111-2222
Failed action list:
Outbound: CIR 64 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
QMProfile: a
User user_2:
Authentication type: Portal
Network attributes:
Interface : GigabitEthernet3/0
IP address : 172.16.187.16
VPN : N/A
Service VLAN : 100
Session-Group-Profile: bbb
Outbound:
CIR 512 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
QMProfile: a
User user_4:
Authentication type: Portal
Network attributes:
Interface : GigabitEthernet2/0
IP address : 172.16.187.166
VPN : N/A
Service VLAN : 100
Field |
Description |
User-Profile |
User profile name. |
Inbound |
Policy applied to incoming traffic. |
Outbound |
Policy applied to outgoing traffic. |
Session-Group-Profile |
Session group profile name. |
CIR |
Committed information rate, in kbps. |
CBS |
Committed burst size, in bytes. |
EBS |
Excess burst size, in bytes. |
PIR |
Peak information rate, in kbps. |
Policy |
Policy name. |
QMProfile |
Queue scheduling profile. |
User user_1 |
Username of a user account with which a user profile or session group profile is associated. |
Authentication type |
Authentication type: · 802.1X—802.1X authentication. · Portal—Portal authentication. · PPP—PPP authentication. · MACA—MAC authentication. |
Network attributes |
Online user information. |
Failed action list |
Actions that failed to be applied to the user. |
qos session-group identify
Use qos session-group identify to identify a session group on an interface.
Use undo qos session-group identify to restore the default.
Syntax
qos session-group identify { customer-vlan | service-vlan | customer-service-vlan | subscriber-id }
undo qos session-group identify
Default
No session group is identified on the interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
customer-vlan: Identifies a session group by CVLAN. A CVLAN is used by a customer on the private network.
service-vlan: Identifies a session group by SVLAN. An SVLAN is used by a service provider to transmit VLAN tagged traffic for customers.
customer-service-vlan: Identifies a session group by CVLAN and SVLAN.
subscriber-id: Identifies a session group by subscriber ID.
Usage guidelines
To configure a session group profile, you must first use the command.
Examples
# Configure GigabitEthernet 1/0 to identify a session group by an SVLAN.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0
[Sysname-GigabitEthernet1/0] qos session-group identify service-vlan
user-profile
Use user-profile to create a user profile and enter its view, or enter the view of an existing user profile.
Use undo user-profile to delete a user profile.
Syntax
user-profile profile-name [ type session-group ]
undo user-profile profile-name
Default
No user profiles exist.
Views
System view
Predefined user roles
network-admin
Parameters
profile-name: Specifies a user profile by its name, a case-sensitive string of 1 to 31 characters. A user profile name can only contain English letters, digits, and underscores (_), and it must start with an English letter. The name must be unique.
type session-group: Specifies a session group profile.
Examples
# Create user profile a123 and enter the view of a123.
<Sysname> system-view
[Sysname] user-profile a123
# Create session group profile a123 and enter the view of a123.
<Sysname> system-view
[Sysname] user-profile a123 type session-group
[Sysname-session-group-profile-a123]