1-15Note that:z Binding attributes are checked upon authentication of a local user. If the binding attributes of a localuser do not match the configured ones, the checking will fail and the user will fail the authenticationas a result. In addition, such binding attribute checking does not take the service types of the usersinto account. That is, a configured binding attribute is effective on all types of users. Therefore, becautious when deciding which binding attributes should be configured for which type of local users.z The bind-attribute ip command applies only when the authentication method (802.1X, forexample) supports IP address upload. If you configure the command when the authenticationmethod (MAC address authentication, for example) does not support IP address upload, localauthentication will fail.Examples# Configure the bound IP of local user abc as 3.3.3.3. system-view[Sysname] local-user abc[Sysname-luser-abc] bind-attribute ip 3.3.3.3cut connectionSyntaxcut connection { access-type dot1x | all | domain isp-name | interface interface-typeinterface-number | ip ip-address | mac mac-address | ucibindex ucib-index | user-name user-name |vlan vlan-id }ViewSystem viewDefault Level2: System levelParametersaccess-type dot1x: Specifies the user connections of 802.1X authentication access type.all: Specifies all user connections.domain isp-name: Specifies all user connections of an ISP domain. The isp-name argument refers tothe name of an existing ISP domain and is a string of 1 to 24 characters.interface interface-type interface-number: Specifies user connections on an interface by the interfacetype and number.ip ip-address: Specifies the user connections of an IP address.mac mac-address: Specifies the user connections of a MAC address, with mac-address in the format ofH-H-H.ucibindex ucib-index: Specifies a user connection by connection index. The value ranges from 0 to4294967295.user-name user-name: Specifies a user connection by username. The user-name argument is acase-sensitive string of 1 to 80 characters and must contain the domain name. If you enter a usernamewithout any domain name, the system assumes that the default domain name is used for the username.
