1-21user interface. For details regarding authentication method and commands accessible to userinterface, refer to Login Configuration in the System Volume.z Binding attributes are checked upon authentication of a local user. If the checking fails, the userfails the authentication. Therefore, be cautious when deciding which binding attributes should beconfigured for a local user.z Every configurable authorization attribute has its definite application environments and purposes.Therefore, when configuring authorization attributes for a local user, consider what attributes areneeded.Configuring User Group AttributesFor simplification of local user configuration and manageability of local users, the concept of user groupis introduced. A user group consists of a group of local users and has a set of local user attributes. Youcan configure local user attributes for a user group to implement centralized management of userattributes for the local users in the group. Currently, you can configure password control attributes andauthorization attributes for a user group.By default, every newly added local user belongs to the user group of system and bears all attributes ofthe group. User group system is automatically created by the device.Follow these steps to configure the attributes for a user group:To do… Use the command… RemarksEnter system view system-view —Create a user group and enter user groupview user-group group-name RequiredConfigure the authorization attributes forthe user groupauthorization-attribute { aclacl-number | callback-numbercallback-number | idle-cut minute| level level | user-profileprofile-name | vlan vlan-id |work-directory directory-name } *OptionalBy default, no authorizationattribute is configured for auser group.Tearing down User Connections ForciblyFollow these steps to tear down user connections forcibly:To do… Use the command… RemarksEnter system view system-view —Tear down AAA user connectionsforciblycut connection { access-type{ dot1x | mac-authentication } |all | domain isp-name | interfaceinterface-type interface-number |ip ip-address | mac mac-address |ucibindex ucib-index | user-nameuser-name | vlan vlan-id }RequiredApplies to only LAN access userconnections at presentDisplaying and Maintaining AAATo do… Use the command… RemarksDisplay the configurationinformation of a specified ISPdomain or all ISP domainsdisplay domain [ isp-name ] Available in any view
