display access-user

Function

The display access-user command displays information about online NAC users.

Format

display access-user open

display access-user option82 { circuit-id text | remote-id text }

display access-user user-group group-name [ detail ]

The detail parameter is only supported by the S5730-HI, S5731-H, S5731S-H, S5731-S, S5731S-S, S5732-H, S6730-H, S6730S-H, S6730-S, S6730S-S, S6720-HI, and S5720-HI.

Parameters

Parameter	Description	Value
open	Displays open user information.	-
option82	Displays information about MAC address authentication users who use the Option 82 field as user names.	-
circuit-id text	Displays information about MAC address authentication users who specify the circuit ID as user names.	The value must be existing circuit-id information.
remote-id text	Displays information about MAC address authentication users who specify the remote ID as user names.	The value must be existing remote-id information.
user-group group-name	Displays information about users in a specified user group.	The value must be an existing user group index.
detail	Displays detailed information about users.	-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run this command to check information about online NAC users.

Example

# Display open user information.

<HUAWEI> display access-user open 
-------------------------------------------------------------------------------
 UserID Username                IP address         MAC             Status 
 ------------------------------------------------------------------------------
 16016  1@radius                10.8.7.5           0011-0904-2f61  Success 
 ------------------------------------------------------------------------------
 Total: 1, printed: 1, Open: 1, printed: 1

Only letters, digits, and special characters can be displayed for username.

When the value of username contains special characters or characters in other languages except English, the device displays dots (.) for these characters. If there are more than three such consecutive characters, three dots (.) are displayed. Here, the special characters are the ASCII codes smaller than 32 (space) or larger than 126 (~).

When the value of username is longer than 20 characters, the device displays up to three dots (.) for the characters following 19; that is, only 22 characters are displayed.

**Table 1** Description of the display access-user command output
Item	Description
UserID	ID that is assigned to a user after the user goes online.
Username	User name.
IP address	User IP address.
MAC	User MAC address.
Status	User access status. Open: For a wired user, the user goes online through the open function upon authentication failure. For wireless users, no authentication is performed. Success: authentication is successful Pre-authen: pre-authentication Client-no-resp: the client does not respond Fail-authorized: authorization upon authentication failure Web-server-down: web server is Down Aaa-server-down: AAA server is Down