display aaa abnormal-offline-record normal-offline-record offline-record online-fail-record

Function

The display aaa abnormal-offline-record command displays the abnormal logout record.

The display aaa normal-offline-record command displays offline records for normal logouts.

The display aaa offline-record command displays offline records.

The display aaa online-fail-record command displays online failure records.

Format

For NetEngine 8000 F1A, NetEngine 8000 F2A:

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { ip-address ip-address | ipv6-address ipv6-address } nop

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { pevlan pevlan-id [ cevlan cevlan-id ] } nop

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { pevlan pevlan-id [ cevlan cevlan-id ] } [ count count-value ]

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { ip-address ip-address | ipv6-address ipv6-address } [ count count-value ]

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { domain-name domain-name | slot slot-id | username username | interface { { interface-name | interface-type interface-number } | { interface-name | interface-type interface-number } { pevlan pevlan-id [ cevlan cevlan-id ] } } | user-type { bind | admin | none } | mac-address mac-address } * [ count count-value ]

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { domain-name domain-name | slot slot-id | username username | interface { { interface-name | interface-type interface-number } | { interface-name | interface-type interface-number } { pevlan pevlan-id [ cevlan cevlan-id ] } } | user-type { bind | admin | none } | mac-address mac-address } * brief

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { domain-name domain-name | slot slot-id | username username | interface { { interface-name | interface-type interface-number } | { interface-name | interface-type interface-number } { pevlan pevlan-id [ cevlan cevlan-id ] } } | user-type { bind | admin | none } | mac-address mac-address } * nop

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { ip-address ip-address | ipv6-address ipv6-address } brief

For NetEngine 8000 F1A, NetEngine 8000 F2A:

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } [ time string-value string-value [ date string-value string-value ] ]

For NetEngine 8000 F1A:

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { domain-name domain-name | slot slot-id | username username | interface { { interface-name | interface-type interface-number } | { interface-name | interface-type interface-number } { pevlan pevlan-id [ cevlan cevlan-id ] } } | user-type { bind | admin | none } | mac-address mac-address } * brief reason | include include-text

For NetEngine 8000 F1A, NetEngine 8000 F2A:

display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } [ time string-value string-value [ date string-value string-value ] ] brief [ reason | include include-text ]

For NetEngine 8000 F1A, NetEngine 8000 F2A:

display aaa { offline-record | online-fail-record } nop

Parameters

Parameter Description Value
domain-name domain-name

Queries the records of users in a specific domain.

The value is a string of 1 to 64 characters.

username username

Indicates the specified user name according to which the logout record is queried. Only the first 32 characters are adopted.

The value is a string of 1 to 253 characters.

brief

Displays brief information of the records.

-

ip-address ip-address

Displays records for a specified IP address.

This value is in dotted decimal notation.

ipv6-address ipv6-address

Displays records for a specified IPv6 address.

The value is a 32-digit hexadecimal number, in the format of X:X:X:X:X:X:X:X.

nop

Displays records about a user. During record displaying, you do not need to enter Y or N to check whether to display the next record.

-

pevlan pevlan-id

Displays the records for normal logouts of users from a specified VLAN. It is valid for Ethernet interfaces only.

The value is an integer ranging from 0 to 4094.

cevlan cevlan-id

Displays the records for normal logouts of users from a specified QinQ VLAN.

The value is an integer ranging from 0 to 4094.

count count-value

Saves a specified number of user login failure records.

The value is an integer that ranges from 1 to 65536.

slot slot-id

Queries the records of users on the board in a specified slot.

The value is a string of 1 to 15 characters, which is not case-sensitive, spaces not supported.

interface

Queries the records of users on a specific interface.

-

interface-name

Specifies the interface name.

-

interface-type

Specifies the interface type.

-

interface-number

Specifies the interface number.

-

user-type

Queries the records of users of a specific type.

-

bind

Queries the records of users of bind authentication users.

-

admin

Queries the records of users of administrators.

-

none

Queries the records of users of unauthenticated users.

-

mac-address mac-address

Queries records of a user with a specific MAC address. mac-address specifies the MAC address of a user. The value is in the format of H-H-H. An H contains 4 hexadecimal numbers.

The value is a 12-digit hexadecimal number, in the format of H-H-H. Each H is 4 digits. If an H contains fewer than 4 digits, the left-most digits are padded with zeros. For example, e0 is displayed as 00e0. The MAC address cannot be set to FFFF-FFFF-FFFF.

time string-value

Specifies the start time.

The value is a string of characters in the format of HH:MM:SS, which indicates hour:minute:second.

string-value

Specifies the end time.

The value is a string of characters in the format of HH:MM:SS, which indicates hour:minute:second.

date string-value

Specifies the start date.

The value is a string of characters in the format of YYYY/MM/DD, which indicates year/month/date.

reason

Indicates the reason why a user fails to go online or goes offline.

-

include include-text

Specifies a character string to match a user.

The value is a string of 1 to 256 case-sensitive characters, spaces supported.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name Operations
aaa-access read

Usage Guidelines

Usage Scenario

If no parameter is specified in the command, all the records are displayed.

You can query the records by specifying the user name, domain name, or combination of them.

After you run the display aaa { abnormal-offline-record | offline-record | normal-offline-record | online-fail-record } command, abnormal logout records are displayed if such records exist, regardless of whether you have run the undo aaa { abnormal-offline-record | offline-record | normal-offline-record | online-fail-record } command.

In VS mode, this command is supported only by the admin VS.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display offline records for normal logouts of the user of the MAC address 00e0-fc12-3456.
<HUAWEI> display aaa normal-offline-record mac-address 00e0-fc12-3456
--------------------------------------------
  User name          : HUAWEI-02017000000000@dom1
  Domain name        : dom1
  User MAC           : 00e0-fc12-3456
  User access type   : IPoE
  User access interface: GigabitEthernet0/1/1.1
  User access PeVlan/CeVlan    : -/-
  User IP address    : -
  User IPv6 address  : 2001:db8::2/128
  User ID            : 0
  User authen state  : Authened
  User acct state    : AcctReady
  User author state  : AuthorIdle
  User login time    : 2012-01-09 13:38:41
  User offline time  : 2012-01-09 14:15:44
  User offline reason: DHCPV6 client release
  --------------------------------------------
  Are you sure to display some information?[Y/N]:y
  --------------------------------------------
  User name          : HUAWEI-02017000000000@dom1
  Domain name        : dom1
  User MAC           : 00e0-fc12-3456
  Stack type flag    : IPv4
  User access type   : IPoE
  User access interface: GigabitEthernet0/1/1.1
  User access PeVlan/CeVlan    : -/-
  User IP address    : 10.10.0.254
  User IPv6 address  : 2001:db8::2/128
  User ID            : 0
  User authen state  : Authened
  User acct state    : AcctReady
  User author state  : AuthorIdle
  User login time    : 2012-01-09 13:38:41
  User offline time  : 2012-01-09 14:15:44
  User offline reason: User request to offline
  --------------------------------------------
  Are you sure to display some information?[Y/N]:
# Display offline records for normal logouts of all users.
<HUAWEI> display aaa normal-offline-record
  --------------------------------------------
  User name          : root
  Domain name        : default_admin
  User MAC           : -
  User access type   : telnet
  User IP address    : 192.168.15.25
  User ID            : 279006
  User authen state  : Authened
  User acct state    : AcctReady
  User author state  : AuthorIdle
  User login time    : 2012-04-27 15:28:37
  User offline time  : 2012-04-27 15:28:59
  User offline reason: User request to offline
  --------------------------------------------
  Are you sure to display some information?[Y/N]:Y
Table 1 Description of the display aaa abnormal-offline-record normal-offline-record offline-record online-fail-record command output
Item Description
User name

User name.

User MAC

MAC address of the user.

User access type

Access type of the user.

User access interface

Indicates the interface to which the user is connected.

User access PeVlan/CeVlan

PE-VLAN ID or CE-VLAN ID of a user.

User IP address

IP address of the user.

User IPv6 address

IPv6 address of a user.

User ID

Index of the user.

User authen state

Indicates the authentication status of a user when the user logs out.

User acct state

Indicates the accounting status of a user when the user logs out.

User author state

Indicates the authorization status of a user when the user logs out.

User login time

Time when the user goes online.

User offline time

Time when the user goes offline.

User offline reason

Reason of user offline.

Domain name

Indicates the domain name of a user.

Stack type flag

Dual-stack user,the options are as follows:

  • IPv4.
  • IPv6(NA).
  • IPv6(NA+PD).
  • IPv6(ND).
  • IPv6(ND+PD).
  • IPv6(PD).
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >