The display aaa abnormal-offline-record command displays the abnormal logout record.
The display aaa normal-offline-record command displays offline records for normal logouts.
The display aaa offline-record command displays offline records.
The display aaa online-fail-record command displays online failure records.
For NetEngine 8000 F1A, NetEngine 8000 F2A:
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { ip-address ip-address | ipv6-address ipv6-address } nop
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { pevlan pevlan-id [ cevlan cevlan-id ] } nop
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { pevlan pevlan-id [ cevlan cevlan-id ] } [ count count-value ]
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { ip-address ip-address | ipv6-address ipv6-address } [ count count-value ]
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { domain-name domain-name | slot slot-id | username username | interface { { interface-name | interface-type interface-number } | { interface-name | interface-type interface-number } { pevlan pevlan-id [ cevlan cevlan-id ] } } | user-type { bind | admin | none } | mac-address mac-address } * [ count count-value ]
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { domain-name domain-name | slot slot-id | username username | interface { { interface-name | interface-type interface-number } | { interface-name | interface-type interface-number } { pevlan pevlan-id [ cevlan cevlan-id ] } } | user-type { bind | admin | none } | mac-address mac-address } * brief
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { domain-name domain-name | slot slot-id | username username | interface { { interface-name | interface-type interface-number } | { interface-name | interface-type interface-number } { pevlan pevlan-id [ cevlan cevlan-id ] } } | user-type { bind | admin | none } | mac-address mac-address } * nop
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { ip-address ip-address | ipv6-address ipv6-address } brief
For NetEngine 8000 F1A, NetEngine 8000 F2A:
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } [ time string-value string-value [ date string-value string-value ] ]
For NetEngine 8000 F1A:
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } { domain-name domain-name | slot slot-id | username username | interface { { interface-name | interface-type interface-number } | { interface-name | interface-type interface-number } { pevlan pevlan-id [ cevlan cevlan-id ] } } | user-type { bind | admin | none } | mac-address mac-address } * brief reason | include include-text
For NetEngine 8000 F1A, NetEngine 8000 F2A:
display aaa { offline-record | online-fail-record | abnormal-offline-record | normal-offline-record } [ time string-value string-value [ date string-value string-value ] ] brief [ reason | include include-text ]
For NetEngine 8000 F1A, NetEngine 8000 F2A:
display aaa { offline-record | online-fail-record } nop
Parameter | Description | Value |
---|---|---|
domain-name domain-name |
Queries the records of users in a specific domain. |
The value is a string of 1 to 64 characters. |
username username |
Indicates the specified user name according to which the logout record is queried. Only the first 32 characters are adopted. |
The value is a string of 1 to 253 characters. |
brief |
Displays brief information of the records. |
- |
ip-address ip-address |
Displays records for a specified IP address. |
This value is in dotted decimal notation. |
ipv6-address ipv6-address |
Displays records for a specified IPv6 address. |
The value is a 32-digit hexadecimal number, in the format of X:X:X:X:X:X:X:X. |
nop |
Displays records about a user. During record displaying, you do not need to enter Y or N to check whether to display the next record. |
- |
pevlan pevlan-id |
Displays the records for normal logouts of users from a specified VLAN. It is valid for Ethernet interfaces only. |
The value is an integer ranging from 0 to 4094. |
cevlan cevlan-id |
Displays the records for normal logouts of users from a specified QinQ VLAN. |
The value is an integer ranging from 0 to 4094. |
count count-value |
Saves a specified number of user login failure records. |
The value is an integer that ranges from 1 to 65536. |
slot slot-id |
Queries the records of users on the board in a specified slot. |
The value is a string of 1 to 15 characters, which is not case-sensitive, spaces not supported. |
interface |
Queries the records of users on a specific interface. |
- |
interface-name |
Specifies the interface name. |
- |
interface-type |
Specifies the interface type. |
- |
interface-number |
Specifies the interface number. |
- |
user-type |
Queries the records of users of a specific type. |
- |
bind |
Queries the records of users of bind authentication users. |
- |
admin |
Queries the records of users of administrators. |
- |
none |
Queries the records of users of unauthenticated users. |
- |
mac-address mac-address |
Queries records of a user with a specific MAC address. mac-address specifies the MAC address of a user. The value is in the format of H-H-H. An H contains 4 hexadecimal numbers. |
The value is a 12-digit hexadecimal number, in the format of H-H-H. Each H is 4 digits. If an H contains fewer than 4 digits, the left-most digits are padded with zeros. For example, e0 is displayed as 00e0. The MAC address cannot be set to FFFF-FFFF-FFFF. |
time string-value |
Specifies the start time. |
The value is a string of characters in the format of HH:MM:SS, which indicates hour:minute:second. |
string-value |
Specifies the end time. |
The value is a string of characters in the format of HH:MM:SS, which indicates hour:minute:second. |
date string-value |
Specifies the start date. |
The value is a string of characters in the format of YYYY/MM/DD, which indicates year/month/date. |
reason |
Indicates the reason why a user fails to go online or goes offline. |
- |
include include-text |
Specifies a character string to match a user. |
The value is a string of 1 to 256 case-sensitive characters, spaces supported. |
Usage Scenario
If no parameter is specified in the command, all the records are displayed.
You can query the records by specifying the user name, domain name, or combination of them. After you run the display aaa { abnormal-offline-record | offline-record | normal-offline-record | online-fail-record } command, abnormal logout records are displayed if such records exist, regardless of whether you have run the undo aaa { abnormal-offline-record | offline-record | normal-offline-record | online-fail-record } command.In VS mode, this command is supported only by the admin VS.
The actual command output varies according to the device. The command output here is only an example.
<HUAWEI> display aaa normal-offline-record mac-address 00e0-fc12-3456 -------------------------------------------- User name : HUAWEI-02017000000000@dom1 Domain name : dom1 User MAC : 00e0-fc12-3456 User access type : IPoE User access interface: GigabitEthernet0/1/1.1 User access PeVlan/CeVlan : -/- User IP address : - User IPv6 address : 2001:db8::2/128 User ID : 0 User authen state : Authened User acct state : AcctReady User author state : AuthorIdle User login time : 2012-01-09 13:38:41 User offline time : 2012-01-09 14:15:44 User offline reason: DHCPV6 client release -------------------------------------------- Are you sure to display some information?[Y/N]:y -------------------------------------------- User name : HUAWEI-02017000000000@dom1 Domain name : dom1 User MAC : 00e0-fc12-3456 Stack type flag : IPv4 User access type : IPoE User access interface: GigabitEthernet0/1/1.1 User access PeVlan/CeVlan : -/- User IP address : 10.10.0.254 User IPv6 address : 2001:db8::2/128 User ID : 0 User authen state : Authened User acct state : AcctReady User author state : AuthorIdle User login time : 2012-01-09 13:38:41 User offline time : 2012-01-09 14:15:44 User offline reason: User request to offline -------------------------------------------- Are you sure to display some information?[Y/N]:
<HUAWEI> display aaa normal-offline-record
--------------------------------------------
User name : root
Domain name : default_admin
User MAC : -
User access type : telnet
User IP address : 192.168.15.25
User ID : 279006
User authen state : Authened
User acct state : AcctReady
User author state : AuthorIdle
User login time : 2012-04-27 15:28:37
User offline time : 2012-04-27 15:28:59
User offline reason: User request to offline
--------------------------------------------
Are you sure to display some information?[Y/N]:Y
Item | Description |
---|---|
User name | User name. |
User MAC | MAC address of the user. |
User access type | Access type of the user. |
User access interface | Indicates the interface to which the user is connected. |
User access PeVlan/CeVlan | PE-VLAN ID or CE-VLAN ID of a user. |
User IP address | IP address of the user. |
User IPv6 address | IPv6 address of a user. |
User ID | Index of the user. |
User authen state | Indicates the authentication status of a user when the user logs out. |
User acct state | Indicates the accounting status of a user when the user logs out. |
User author state | Indicates the authorization status of a user when the user logs out. |
User login time | Time when the user goes online. |
User offline time | Time when the user goes offline. |
User offline reason | Reason of user offline. |
Domain name | Indicates the domain name of a user. |
Stack type flag | Dual-stack user,the options are as follows:
|