11-Security Command Reference

HomeSupportResource CenterNFVH3C VSRH3C VSRTechnical DocumentsCommandCommand ReferencesH3C VSR Series Virtual Services Routers Command References(V7)-R0621-6W30011-Security Command Reference
04-User profile commands
Title Size Download
04-User profile commands 54.93 KB

User profile commands

display user-profile

Use display user-profile to display configuration and online user information for user profiles.

Syntax

In standalone mode:

display user-profile [ session-group ] [ name profile-name ]

In IRF mode:

display user-profile [ session-group ] [ name profile-name ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

session-group: Specifies a session group profile.

name profile-name: Specifies a user profile by its name, a case-sensitive string of 1 to 31 characters. Valid characters include English letters, digits, and underscores (_). The name must start with an English letter or digit, and cannot contain only digits. The name must be globally unique. If you do not specify this option, the command displays configuration and online user information for all user profiles.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays user profile configuration and online user information for all member devices. (In IRF mode.)

Examples

# Display configuration and online user information for user profile aaa.

<Sysname> display user-profile name aaa

  User-Profile: aaa

    Inbound:

      CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

      Policy: p1

    Outbound:

      CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

 

    User user_1:

      Authentication type: Portal

      Network attributes:

        Interface    : GigabitEthernet1/0

        MAC address  : 0000-1111-2222

      Failed action list:

        Inbound: Policy p1

        Inbound: CIR 64 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

# Display configuration and online user information for all session group profiles.

<Sysname> display user-profile session-group

  Session-Group-Profile: aaa

    Outbound:

      CIR 64 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

    QMProfile: a

 

    User user_1:

      Authentication type: Portal

      Network attributes:

        Interface    : GigabitEthernet1/0

        MAC address  : 0000-1111-2222

      Failed action list:

        Outbound: CIR 64 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

        QMProfile: a

    User user_2:

      Authentication type: Portal

      Network attributes:

        Interface    : GigabitEthernet3/0

        IP address   : 172.16.187.16

        VPN          : N/A

        Service VLAN : 100

 

  Session-Group-Profile: bbb

    Outbound:

      CIR 512 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

    QMProfile: a

 

    User user_4:

      Authentication type: Portal

      Network attributes:

        Interface    : GigabitEthernet2/0

        IP address   : 172.16.187.166

        VPN          : N/A

        Service VLAN : 100

Table 1 Command output

Field

Description

User-Profile

User profile name.

Inbound

Policy applied to incoming traffic.

Outbound

Policy applied to outgoing traffic.

Session-Group-Profile

Session group profile name.

CIR

Committed information rate, in kbps.

CBS

Committed burst size, in bytes.

EBS

Excess burst size, in bytes.

PIR

Peak information rate, in kbps.

Policy

Policy name.

QMProfile

Queue scheduling profile.

User user_1

Username of a user account with which a user profile or session group profile is associated.

Authentication type

Authentication type:

·     802.1X—802.1X authentication.

·     Portal—Portal authentication.

·     PPP—PPP authentication.

·     IPoE—IPoE authentication.

·     MACA—MAC authentication.

Network attributes

Online user information.

Failed action list

Actions that failed to be applied to the user.

 

qos session-group identify

Use qos session-group identify to identify a session group on an interface.

Use undo qos session-group identify to restore the default.

Syntax

qos session-group identify { customer-vlan | service-vlan | customer-service-vlan | subscriber-id }

undo qos session-group identify

Default

No session group is identified on the interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

customer-vlan: Identifies a session group by CVLAN. A CVLAN is used by a customer on the private network.

service-vlan: Identifies a session group by SVLAN. An SVLAN is used by a service provider to transmit VLAN tagged traffic for customers.

customer-service-vlan: Identifies a session group by CVLAN and SVLAN.

subscriber-id: Identifies a session group by subscriber ID.

Usage guidelines

To configure a session group profile, you must first use the command.

Examples

# Configure GigabitEthernet 1/0 to identify a session group by an SVLAN.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0

[Sysname-GigabitEthernet1/0] qos session-group identify service-vlan

user-profile

Use user-profile to create a user profile and enter its view, or enter the view of an existing user profile.

Use undo user-profile to delete a user profile.

Syntax

user-profile profile-name [ type session-group ]

undo user-profile profile-name

Default

No user profiles exist.

Views

System view

Predefined user roles

network-admin

Parameters

profile-name: Specifies a user profile by its name, a case-sensitive string of 1 to 31 characters. Valid characters include English letters (a-z, A-Z), digits (0-9), and underscores (_). The name must start with an English letter or digit, and cannot contain only digits. The name must be globally unique.

type session-group: Specifies a session group profile.

Examples

# Create user profile a123 and enter the view of a123.

<Sysname> system-view

[Sysname] user-profile a123

[Sysname-user-profile-a123]

# Create session group profile a123 and enter the view of a123.

<Sysname> system-view

[Sysname] user-profile a123 type session-group

[Sysname-session-group-profile-a123]