< Home

static-user

Function

The static-user command configures a static user.

The undo static-user command deletes the configured static user.

By default, no static user is configured.

Format

static-user start-ip-address [ end-ip-address ] [ vpn-instance vpn-instance-name ] [ domain-name domain-name | interface interface-type interface-number [ detect ] | mac-address mac-address | vlan vlan-id | keep-online ] *

undo static-user start-ip-address [ end-ip-address ] [ vpn-instance vpn-instance-name ]

Parameters

Parameter

Description

Value

start-ip-address [ end-ip-address ]

Specifies the IP address range that a static user belongs to. If end-ip-address is not specified, a static user is specified by start-ip-address.

The value is in dotted decimal notation.

vpn-instance vpn-instance-name

Specifies the name of a VPN instance that a static user belongs to.

The value must be an existing VPN instance name.

domain-name domain-name

Specifies the domain that a static user belongs to.

The value must be an existing domain name.

interface interface-type interface-number

Specifies the interface connected to a static user.
  • interface-type specifies the interface type.
  • interface-number specifies the interface number.

-

detect

Permits the device to send ARP packets to trigger Portal authentication for static users in offline state.

-

mac-address mac-address

Specifies the MAC address of a static user.

The value is in H-H-H format. An H is a hexadecimal number of 1 to 4 digits.

vlan vlan-id

Specifies the ID of a VLAN that a static user belongs to.

The value is an integer that ranges from 1 to 4094.

keep-online

Keeps a static user online, with offline detection not performed.

-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In network deployment, static IP addresses are assigned to dumb terminals such as printers and servers. There users can be configured as static users for flexible authentication.

After static users are configured, the device can use static user information such as their IP addresses as the user names to authenticate the users only when Portal authentication is enabled on the interfaces connected to the static users.

Precautions

When the interface (interface interface-type interface-number) mapping static users is specified, the VLAN (vlan vlan-id) that the interface belongs to must be configured.

This function takes effect only for users who go online after this function is successfully configured.

Example

# Specify the IP address range 10.1.1.1-10.1.1.10, authentication domain huawei, and VLAN 10 that static users belong to.

<HUAWEI> system-view
[HUAWEI] static-user 10.1.1.1 10.1.1.10 domain-name huawei vlan 10
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >