User profile commands -- display user-profile

Use display user-profile to display configuration and online user information for user profiles.

Syntax

Centralized devices:

display user-profile [ session-group ] [ name profile-name ]

Distributed devices in standalone mode:Centralized IRF devices:

display user-profile [ session-group ] [ name profile-name ] [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

display user-profile [ session-group ] [ name profile-name ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

session-group: Specifies a session group profile.

name profile-name: Specifies a user profile by its name, a case-sensitive string of 1 to 31 characters. Valid characters include English letters, digits, and underscores (_). The name must start with an English letter and must be unique. If you do not specify this option, the command displays configuration and online user information for all user profiles.

slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays user profile configuration and online user information on all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays user profile configuration and online user information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays information for all member devices if you do not specify a member device. On an IRF 3 system, this command displays information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify this option, the command displays user profile configuration and online user information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays information for all cards if you do not specify a card. On an IRF 3 system, this command displays information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.

Examples

# Display configuration and online user information for user profile aaa.

<Sysname> display user-profile name aaa

User-Profile: aaa

Inbound:

CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

Policy: p1

Outbound:

CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

IGMP access policy:

2000, 3000

MLD access policy:

2000, 3000

IGMP Snooping access policy:

2000, 3000

MLD Snooping access policy:

2000, 3000

User user_1:

Authentication type: 802.1X

Network attributes:

Interface : GigabitEthernet1/0/1

MAC address : 0000-1111-2222

Failed action list:

Inbound: Policy p1

Inbound: CIR 64 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

# Display configuration and online user information for all session group profiles.

<Sysname> display user-profile session-group

Session-Group-Profile: aaa

Outbound:

CIR 64 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

QMProfile: a

User user_1:

Authentication type: 802.1X

Network attributes:

Interface : GigabitEthernet1/0/1

MAC address : 0000-1111-2222

Failed action list:

Outbound: CIR 64 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

QMProfile: a

User user_2:

Authentication type: Portal

Network attributes:

Interface : GigabitEthernet1/0/3

IP address : 172.16.187.16

VPN : N/A

Service VLAN : 100

Session-Group-Profile: bbb

Outbound:

CIR 512 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

QMProfile: a

User user_4:

Authentication type: Portal

Network attributes:

Interface : GigabitEthernet1/0/2

IP address : 172.16.187.166

VPN : N/A

Service VLAN : 100

Table 1 Command output

Field | Description
User-Profile | User profile name.
Inbound | Policy applied to incoming traffic.
Outbound | Policy applied to outgoing traffic.
Session-Group-Profile | Session group profile name.
IGMP access policy | The numbers 2000 and 3000 indicate the numbers of the ACLs used by the IGMP access policy.
MLD access policy | The numbers 2000 and 3000 indicate the numbers of the ACLs used by the MLD access policy.
IGMP Snooping access policy | The numbers 2000 and 3000 indicate the numbers of the ACLs used by the IGMP Snooping access policy.
MLD Snooping access policy | The numbers 2000 and 3000 indicate the numbers of the ACLs used by the MLD Snooping access policy.
CIR | Committed information rate, in kbps.
CBS | Committed burst size, in bytes.
EBS | Excess burst size, in bytes.
PIR | Peak information rate, in kbps.
Policy | Policy name.
QMProfile | Queue scheduling profile.
User user_1 | Username of a user account with which a user profile or session group profile is associated.
Authentication type | Authentication type: · 802.1X—802.1X authentication. · Portal—Portal authentication. · PPP—PPP authentication. · IPoE—IPoE authentication. · MACA—MAC authentication.
Network attributes | Online user information.
Failed action list | Actions that failed to be applied to the user.

User profile commands -- qos queue

Use qos queue to specify a queue for session packets that use the user profile.

Use undo qos queue to restore the default.

Syntax

qos queue { queue-id | queue-name }

undo qos queue

Default

No queue for session packets is specified for a user profile.

Views

User profile view

Predefined user roles

network-admin

mdc-admin

Parameters

queue { queue-id | queue-name }: Specifies a queue by its ID or name. The value range for the queue-id argument is 0 to 7. The following matrix shows the mapping between queue IDs and queue names:

Queue ID | Queue name
0 | be
1 | af1
2 | af2
3 | af3
4 | af4
5 | ef
6 | cs6
7 | cs7

Usage guidelines

If the queue scheduling profile supports four queues, the value range for the queue-id argument can only be 0 to 3.

Session packets are scheduled based on the scheduling priority of the specified queue.

Examples

# Specify queue 7 for session packets that use user profile user.

<Sysname> system-view

[Sysname] user-profile user

[Sysname-user-profile-user] qos queue 7

User profile commands -- qos session-group identify

Use qos session-group identify to identify a session group on an interface.

Use undo qos session-group identify to restore the default.

Syntax

qos session-group identify { customer-vlan | service-vlan | customer-service-vlan | subscriber-id }

undo qos session-group identify

Default

No session group is identified on the interface.

Views

Interface view

Predefined user roles

network-admin

mdc-admin

Parameters

customer-vlan: Identifies a session group by CVLAN. A CVLAN is used by a customer on the private network.

service-vlan: Identifies a session group by SVLAN. An SVLAN is used by a service provider to transmit VLAN tagged traffic for customers.

customer-service-vlan: Identifies a session group by CVLAN and SVLAN.

subscriber-id: Identifies a session group by subscriber ID.

Usage guidelines

To configure a session group profile, you must first use the command.

Examples

# Configure GigabitEthernet 1/0/1 to identify a session group by an SVLAN.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos session-group identify service-vlan

User profile commands -- user-profile

Use user-profile to create a user profile and enter its view, or enter the view of an existing user profile.

Use undo user-profile to delete a user profile.

Syntax

user-profile profile-name [ type session-group ]

undo user-profile profile-name

Default

No user profiles exist.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

profile-name: Specifies a user profile by its name, a case-sensitive string of 1 to 31 characters. A user profile name can only contain English letters, digits, and underscores (_), and it must start with an English letter. The name must be unique.

type session-group: Specifies a session group profile.

Examples

# Create user profile a123 and enter the view of a123.

<Sysname> system-view

[Sysname] user-profile a123

[Sysname-user-profile-a123]

# Create session group profile a123 and enter the view of a123.

<Sysname> system-view

[Sysname] user-profile a123 type session-group

[Sysname-session-group-profile-a123]