Command Manual (For Soliton) – AAA
H3C S3100 Series Ethernet Switches
Chapter 1 AAA Configuration Commands
1-9
Parameters
string
: Number or descriptor of the authorized VLAN for the current user, a string of 1 to
32 characters. If it is a numeral string and there is a VLAN with the number configured,
it specifies the VLAN. If it is a numeral string but no VLAN is present with the number, it
specifies the VLAN using it as the VLAN descriptor.
Description
Use the
authorization vlan
command to specify an authorized VLAN for a local user. A
user passing the authentication of the local RADIUS server can access network
resources in the authorized VLAN.
Use the
undo authorization vlan
command to remove the configuration.
By default, no authorized VLAN is specified for a local user.
Note:
For local
RADIUS
authentication to take effect, the VLAN assignment mode must be
set to
string
after you specify authorized VLANs for local users.
Examples
# Specify the authorized VLAN for local user 00-14-22-2C-AA-69 as VLAN 2.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] local-user 00-14-22-2C-AA-69
[Sysname-luser-00-14-22-2C-AA-69] authorization vlan 2
1.1.9 cut connection
Syntax
cut connection
{
all
|
access-type
{
dot1x
|
mac-authentication
} |
domain isp-name
|
interface interface-type interface-number
|
ip
ip-address
|
mac mac-address
|
radius-scheme
radius-scheme-name
|
vlan
vlan-id
|
ucibindex ucib-index
|
user-name user-name
}
View
System view
Parameters
all
: Cuts down all user connections.