- Table of Contents
-
- 12-Security Command Reference
- 00-Preface
- 01-Security zone commands
- 02-AAA commands
- 03-802.1X commands
- 04-MAC authentication commands
- 05-Portal commands
- 06-Port security commands
- 07-User profile commands
- 08-Password control commands
- 09-Keychain commands
- 10-Public key management commands
- 11-PKI commands
- 12-IPsec commands
- 13-Group domain VPN commands
- 14-SSH commands
- 15-SSL commands
- 16-SSL VPN commands
- 17-ASPF commands
- 18-APR commands
- 19-mGRE commands
- 20-Session management commands
- 21-Connection limit commands
- 22-Object group commands
- 23-Object policy commands
- 24-Security policy commands
- 25-Attack detection and prevention commands
- 26-IP source guard commands
- 27-ARP attack protection commands
- 28-ND attack defense commands
- 29-uRPF commands
- 30-SAVA commands
- 31-Crypto engine commands
- 32-FIPS commands
- 33-MACsec commands
- Related Documents
-
Title | Size | Download |
---|---|---|
07-User profile commands | 62.10 KB |
User profile commands
display user-profile
Use display user-profile to display configuration and online user information for user profiles.
Syntax
In standalone mode:
display user-profile [ name profile-name ]
In IRF mode:
display user-profile [ name profile-name ] [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name profile-name: Specifies a user profile by its name, a case-sensitive string of 1 to 31 characters. Valid characters include English letters, digits, hyphens (-), and underscores (_). The name must start with an English letter or digit, and cannot contain only digits. The name must be globally unique. If you do not specify this option, the command displays configuration and online user information for all user profiles.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays user profile configuration and online user information for all member devices. (In IRF mode.)
Examples
# (In standalone mode.) Display configuration and online user information for user profile aaa.
<Sysname> display user-profile name aaa
User-Profile: aaa
Inbound:
Committed Access Rate:
Rule: If-match any
CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
Rule: If-match acl 2000
CIR 3000 (kbps), CBS 187500 (Bytes), EBS 0 (Bytes)
Policy: p1
Outbound:
Committed Access Rate:
Rule: If-match acl 3000
CIR 1000 (kbps), CBS 62500 (Bytes), EBS 0 (Bytes)
Rule: If-match any
CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
Line Rate:
CIR 32 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
Priority queuing: pql 1
General Traffic Shaping:
CIR 200 (kbps), CBS 12500 (Bytes), EBS 0 (Bytes)
Overhead compensation length: 18
User user_1:
Authentication type: Portal
Network attributes:
Interface : GigabitEthernet1/0/1
MAC address : 0000-1111-2222
Failed action list:
Inbound: Policy p1
Inbound: CIR 64 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
# (In IRF mode.) Display configuration and online user information for user profile aaa.
<Sysname> display user-profile name aaa
User-Profile: aaa
Inbound:
Committed Access Rate:
Rule: If-match any
CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
Rule: If-match acl 2000
CIR 3000 (kbps), CBS 187500 (Bytes), EBS 0 (Bytes)
Policy: p1
Outbound:
Committed Access Rate:
Rule: If-match acl 3000
CIR 1000 (kbps), CBS 62500 (Bytes), EBS 0 (Bytes)
Rule: If-match any
CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
Line Rate:
CIR 32 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)
Priority queuing: pql 1
General Traffic Shaping:
CIR 200 (kbps), CBS 12500 (Bytes), EBS 0 (Bytes)
Overhead compensation length: 18
slot 1:
User user_1:
User ID: 0x10000002
Authentication type: Portal
Network attributes:
Interface : GigabitEthernet1/0/1
MAC address : 0000-1111-2222
IP address : 172.16.187.16
Service VLAN : 100
Field |
Description |
User-Profile |
User profile name. |
Inbound |
Policy applied to incoming traffic. |
Outbound |
Policy applied to outgoing traffic. |
CIR |
Committed information rate, in kbps. |
CBS |
Committed burst size, in bytes. |
EBS |
Excess burst size, in bytes. |
PIR |
Peak information rate, in kbps. |
Policy |
Policy name. |
Line Rate |
Information about user profile-based rate limiting. When the peer-advertise-bandwidth keyword is specified in the qos lr outbound command, this field displays the peer-advertise-bandwidth configuration information. |
Priority queuing |
Information about priority queuing applied to a user profile. |
General Traffic Shaping |
Information about GTS applied to a user profile. |
User user_1 |
Username of a user account with which a user profile is associated. |
Authentication type |
Authentication type: · 802.1X—802.1X authentication. · Portal—Portal authentication. · PPP—PPP authentication. · MACA—MAC authentication. |
Network attributes |
Online user information. |
Failed action list |
Actions that failed to be applied to the user. |
Overhead compensation length |
Packet compensation length in bytes for outbound traffic policing. |
Rule |
Match criteria. |
user-profile
Use user-profile to create a user profile and enter its view, or enter the view of an existing user profile.
Use undo user-profile to delete a user profile.
Syntax
user-profile profile-name
undo user-profile profile-name
Default
No user profiles exist.
Views
System view
Predefined user roles
network-admin
Parameters
profile-name: Specifies a user profile by its name, a case-sensitive string of 1 to 31 characters. Valid characters include English letters (a-z, A-Z), digits (0-9), hyphens (-), and underscores (_). The name must start with an English letter or digit, and cannot contain only digits. The name must be globally unique.
Examples
# Create user profile a123 and enter the view of a123.
<Sysname> system-view
[Sysname] user-profile a123