display access-user mac-address
Function
The display access-user mac-address command displays information about the access user with a specified MAC address, interface, pevlan, cevlan.
Parameters
| Parameter | Description | Value |
|---|---|---|
| mac-address mac-address |
Specifies a MAC address. |
The value is a 12-digit hexadecimal number, in the format of H-H-H. Each H is 4 digits. If an H contains fewer than 4 digits, the left-most digits are padded with zeros. For example, e0 is displayed as 00e0. The MAC address cannot be set to FFFF-FFFF-FFFF. |
| mac-address |
Specifies a MAC address. |
The value is a 12-digit hexadecimal number, in the format of H-H-H. Each H is 4 digits. If an H contains fewer than 4 digits, the left-most digits are padded with zeros. For example, e0 is displayed as 00e0. The MAC address cannot be set to FFFF-FFFF-FFFF. |
| interface-name |
Specifies an interface name. |
- |
| interface-type |
Specifies an interface type. |
- |
| interface-number |
Specifies an interface number. |
- |
| pevlan pevlan-id |
Displays information about the access users in the specified VLAN of an interface. The interface can be an Ethernet interface only. pevlan-id specifies the ID of a VLAN. |
The value is an integer ranging from 0 to 4094. |
| end-pevlan-id |
Specifies the end VLAN. |
The value is an integer ranging from 0 to 4094. |
| cevlan cevlan-id |
Displays information about the access users in a specified QinQ VLAN on the interface. cevlan-id specifies the ID of a QinQ VLAN. If the value is 0, the information about the access users with one VLAN tag is displayed. |
The value is an integer ranging from 0 to 4094. |
| end-cevlan-id |
Specifies the end QinQ VLAN. |
The value is an integer ranging from 0 to 4094. |
Usage Guidelines
Usage Scenario
To check online user information based on MAC addresses, interface names, PE-VLAN IDs, or CE-VLAN IDs, run the display access-user mac-address command.
To monitor the information about the access users or locate the user access fault, run the display access-user mac-address command to view information about access users on the device by specifying mac address of the user. When one-to-many mapping between one MAC address and many sessions is enabled, users are differentiated by MAC+interface+VLAN. To check online user information based on MAC addresses, interface names, PE-VLAN IDs, or CE-VLAN IDs, run the display access-user mac-address command.
In detailed information about access users, (Radius) is displayed for each attribute delivered by the RADIUS server. If the ui-mode type2 command is run in the system view, the real-time user rates displayed in the command output are in kbit/s.Precautions
In VS mode, this command is supported only by the admin VS.
If the command output contains "Info: No online user!", the number of queried users based on the specified parameter is 0 or the device does not support query based on the specified parameter.Example
The actual command output varies according to the device. The command output here is only an example.
<HUAWEI> display access-user mac-address 00e0-fc12-3456 interface GigabitEthernet 0/1/1.5 pevlan 100 cevlan 200 ------------------------------------------------------------------- User access index : 153 State : Used User name : 123 Domain name : god Backup from(IPv6) : Remote Backup from(IPv4) : Remote RUI user state : - User access interface : GigabitEthernet0/1/1.5 User access PeVlan/CeVlan : 500/- User MAC : 00e0-fc12-3456 User IP address : 192.168.1.71 User IP netmask : 255.255.255.255 User gateway address : 192.168.1.1 User Authen IP Type : ipv4/-/- User Basic IP Type : -/-/- Server IP : 192.168.1.1 User MSIDSN name : - EAP user : No MD5 end : No MTU : 1480 IPv6 MTU : 1480 Vpn-Instance : - User access type : PPPOE User authentication type : PPP authentication RADIUS-server-template : god Server-template of second acct: - Agent-Circuit-Id : - Agent-Remote-Id : - Access-line-id Information(pppoe+): - Current authen method : RADIUS authentication Authen result : Success Current author method : Idle Author result : Success Action flag : Idle Authen state : Authed Author state : Idle Configured accounting method : RADIUS accounting Quota-out : Offline Current accounting method : RADIUS accounting Realtime-accounting-switch : Close Realtime-accounting-interval(sec) : - Realtime-accounting-send-update : No Realtime-accounting-traffic-update : No Access start time : 2012-05-25 16:23:00 Accounting start time : 2012-05-25 16:23:00 Online time (h:min:sec) : 23:44:34 Accounting state : Accounting Accounting session ID : HUAWEI030000000000004dce2aAAAAAA Idle-cut direction : Both Idle-cut-data (time,rate,idle): 0 sec, 60 kbyte/min, 0 min 0 sec Ipv4 Realtime speed : 0 kbyte/min Ipv4 Realtime speed inbound : 0 kbyte/min Ipv4 Realtime speed outbound : 0 kbyte/min Link bandwidth auto adapt : Disable UpPriority : Unchangeable DownPriority : Unchangeable Multicast-profile : - Multicast-profile-ipv6 : - Max Multicast List Number : 4 IGMP enable : Yes User-Group : - If flow info contain l2-head : Yes Flow-Statistic-Up : Yes Flow-Statistic-Down : Yes Up packets number(high,low) : (0,0) Up bytes number(high,low) : (0,0) Down packets number(high,low) : (0,0) Down bytes number(high,low) : (0,0) IPV6 Up packets number(high,low) : (0,0) IPV6 Up bytes number(high,low) : (0,0) IPV6 Down packets number(high,low) : (0,0) IPV6 Down bytes number(high,low) : (0,0) Service-type : - ------------------------------------------------------------------- Are you sure to display some information?[Y/N]:
<R65USING> display access-user mac-address 00e0-1234-52da interface GigabitEthernet 0/1/1 pevlan 100 cevlan 200 2021-01-07 19:27:24.963 ------------------------------------------------------------------- User access index : 1216 State : Used User name : user# Domain name : test User backup state : No RUI user state : - User access interface : GigabitEthernet0/1/1 User access PeVlan/CeVlan : -/- User access slot : 1 User MAC : 00e0-0123-52da User IP address : 10.0.0.99 User IP netmask : 255.255.255.255 User gateway address : 10.0.0.1 User Authen IP Type : ipv4/ipv6/- User Basic IP Type : -/-/- IPv6 address assignment mode : - RA link-prefix : Disable Coa-zero-lease : No User MSIDSN name : - EAP user : Yes MD5 end : Yes Vpn-Instance : - User access type : EAP User authentication type : 802.1x authentication Server-template of second acct: - Agent-Circuit-Id : - Agent-Remote-Id : - Access-line-id Information(dhcpv4 option82): - Current authen method : No authentication Authen result : Success Current author method : Idle Author result : Idle Action flag : Idle Authen state : Authed Author state : Idle Configured accounting method : No accounting Quota-out : Offline Current accounting method : No accounting Realtime-accounting-switch : Close Realtime-accounting-interval(sec) : - Realtime-accounting-send-update : No Realtime-accounting-traffic-update : No Access start time : 2021-01-07 19:19:26 Accounting start time : 2021-01-07 19:19:30 Online time (h:min:sec) : 00:07:55 Accounting state : Ready Accounting session ID : R65USIN02019000000000e055afAAAATm Idle-cut direction : Both Idle-cut-data (time,rate,idle): 0 sec, 60 kbyte/min, 0 min 0 sec Ipv4 Realtime speed : 0 kbyte/min Ipv4 Realtime speed inbound : 0 kbyte/min Ipv4 Realtime speed outbound : 0 kbyte/min Link bandwidth auto adapt : Disable UpPriority : Unchangeable DownPriority : Unchangeable Multicast-profile : - Multicast-profile-ipv6 : - Max Multicast List Number : 4 IGMP enable : Yes PIM-SM enable : No PIM-SM-V6 enable : No User-Group : - Next-hop : - Policy-route-IPV6-address : - If flow info contain l2-head : Yes Flow-Statistic-Up : Yes Flow-Statistic-Down : Yes Up packets number(high,low) : (0,0) Up bytes number(high,low) : (0,0) Down packets number(high,low) : (0,0) Down bytes number(high,low) : (0,0) IPV6 Up packets number(high,low) : (0,0) IPV6 Up bytes number(high,low) : (0,0) IPV6 Down packets number(high,low) : (0,0) IPV6 Down bytes number(high,low) : (0,0) Service-type : - ------------------------------------------------------------------- Are you sure to display some information? [Y/N]:y
| Item | Description |
|---|---|
| User access index | Index number of a user. |
| User name | User name. |
| User access interface | Name of the interface through which a user accesses the device. |
| User access PeVlan/CeVlan | Outer/inner VLAN tag of a QinQ packet. |
| User MAC | MAC address of a user. |
| User IP address | IP address of the user. |
| User IP netmask | Mask of the user IP address. |
| User gateway address | Gateway address of the user. |
| User Authen IP Type | Authorization type of a user. |
| User Basic IP Type | Basic IP protocol of a user. |
| User MSIDSN name | MSIDSN name of a user. |
| User access type | Access type of a user. |
| User authentication type | Authentication type of an access user. |
| User backup state | User backup state. -Not an RUI user. |
| User access slot | User access slot ID. |
| Domain name | Name of the domain to which a user belongs. |
| Backup from(IPv6) | Backup Mode (IPv6).
|
| Backup from(IPv4) | Backup Mode (IPv4).
|
| RUI user state | Status of the remote backup profile bound to the RUI user.
|
| state | Status indicating whether a domain is used. |
| Authen state | Authentication status. |
| Authen result | Authentication result.
|
| Server IP | IP address of the DHCPv4 server that allocates IP addresses to the user. |
| EAP user | EAP user. |
| MD5 end | MD5 end. The encryption algorithm used for MD5 authentication poses security risks. |
| MTU | Maximum transmission unit. |
| IPv6 MTU | Maximum transmission unit for IPv6 users. |
| IPv6 address assignment mode | IPv6 address assignment modeIPv6 address assignment mode. |
| Vpn-Instance | Name of a VPN instance. |
| RADIUS-server-template | Template of the RADIUS server used by a user for authentication. |
| Server-template of second acct | Server template used by a user for second accounting. |
| Agent-Circuit-Id | Specifies the agent-circuit-id (a sub-option of dhcpv4 option 82/dhcpv6 option18) value. |
| Agent-Remote-Id | Specifies the agent-remote-id (a sub-option of dhcpv4 option 82/dhcpv6 option37) value. |
| Access-line-id Information | Specifies the information of access-line-id (sub-options of option 82). |
| Current authen method | Authentication method used by a user. |
| Current author method | Authorization method used by a user. |
| Current accounting method | Accounting method being used by a user. |
| Author result | Authorization results. |
| Author state | Whether a user is authorized. |
| Action flag | Action flag of a user. |
| Configured accounting method | Accounting method configured for a user. |
| Quota-out | Policy to be adopted in case that the quota is used up. |
| Realtime-accounting-switch | Whether real-time accounting is enabled. |
| Realtime-accounting-interval(sec) | Real-time accounting interval. |
| Realtime-accounting-send-update | Whether the device sends real-time accounting packets immediately after receiving an accounting reply packet. |
| Realtime-accounting-traffic-update | Whether the device sends real-time accounting packets when updating traffic. |
| Access start time | Start time of the user access device. |
| Accounting start time | Time to perform accounting for users. |
| Accounting state | Accounting state. |
| Accounting session ID | Specifies an accounting session ID. |
| Online time (h:min:sec) | Time when accounting started. |
| Idle-cut-data (time,rate,idle) | Parameters of idle cut in the current domain. |
| Ipv4 Realtime speed | Real-time traffic rate of IPv4 access users. If the ui-mode type2 command is run, the displayed value of this field is in kbit/s rather than in kbyte/min. |
| Ipv4 Realtime speed inbound | Real-time rate of traffic sent by IPv4 access users. If the ui-mode type2 command is run, the displayed value of this field is in kbit/s rather than in kbyte/min. |
| Ipv4 Realtime speed outbound | Real-time rate of traffic sent to IPv4 access users. If the ui-mode type2 command is run, the displayed value of this field is in kbit/s rather than in kbyte/min. |
| Link bandwidth auto adapt | Auto link bandwidth adjustment. |
| UpPriority | Priority of upstream packets. |
| DownPriority | Priority of downstream packets. |
| Multicast-profile | Multicast profile used by users in the current domain. |
| Multicast-profile-ipv6 | Multicast profile used by IPv6 users in the current domain. |
| Max Multicast List Number | Maximum number of multicast profiles that can be bound to a domain. |
| IGMP enable | Whether IGMP is enabled. |
| User-Group | Group to which a user belongs to. |
| If flow info contain l2-head | Whether a packet contains a layer 2 header. |
| Flow-Statistic-Up | Statistics about traffic sent by access users. |
| Flow-Statistic-Down | Statistics about traffic sent to access users. |
| Up packets number(high,low) | Number of packets sent by IPv4 users. The formula is as follows: Number of packets = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of packets = 1 x 4294967296 + 705032704 = 5000000000.
|
| Up bytes number(high,low) | Number of bytes sent by IPv4 users. The formula is as follows: Number of bytes = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of bytes = 1 x 4294967296 + 705032704 = 5000000000.
|
| Down packets number(high,low) | Number of packets sent to IPv4 users. The formula is as follows: Number of packets = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of packets = 1 x 4294967296 + 705032704 = 5000000000.
|
| Down bytes number(high,low) | Number of bytes sent to IPv4 users. The formula is as follows: Number of bytes = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of bytes = 1 x 4294967296 + 705032704 = 5000000000.
|
| IPV6 Up packets number(high,low) | Number of packets sent by IPv6 users. The formula is as follows: Number of packets = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of packets = 1 x 4294967296 + 705032704 = 5000000000.
|
| IPV6 Up bytes number(high,low) | Number of bytes sent by IPv6 users. The formula is as follows: Number of bytes = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of bytes = 1 x 4294967296 + 705032704 = 5000000000.
|
| IPV6 Down packets number(high,low) | Number of packets sent to IPv6 users. The formula is as follows: Number of packets = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of packets = 1 x 4294967296 + 705032704 = 5000000000.
|
| IPV6 Down bytes number(high,low) | Number of bytes sent to IPv6 users. The formula is as follows: Number of bytes = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of bytes = 1 x 4294967296 + 705032704 = 5000000000.
|
| Service-type | Type of service. |