display access-user user-id verbose

Function

The display access-user user-id verbose command displays information about the access user with a specified user ID.

Format

display access-user user-id user-id verbose

Parameters

Parameter Description Value
user-id

Specifies a user ID.

The value is an integer that ranges from 0 to 4294967295.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name Operations
aaa-access read

Usage Guidelines

To monitor the information about the access users or locate the user access fault, you can run the display access-user user-id verbose command to view information and the verbose information about access users on the by specifying the user-id.

In detailed information about access users, (Radius) is displayed for each attribute delivered by the RADIUS server.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display information about activated DAA services.
<HUAWEI> display access-user user-id 0 verbose
-------------------------------------------------------------------
               ................
DAA information:
Service info : ning
Active DAA services by order:
Service info(Level1) : ning
Service info(Level2) : -
Service info(Level3) : -
Service info(Level4) : -
Service info(Level5) : ning
Service info(Level6) : -
Service info(Level7) : -
Service info(Level8) : -
               .................
               .................
Value-added-service Flow Statistic:
DAA(level1) IPv6 Up packets number(high,low) : (0,0)
DAA(level1) IPv6 Up bytes number(high,low) : (0,0)
DAA(level1) IPv6 Down packets number(high,low) : (0,0)
DAA(level1) IPv6 Down bytes number(high,low) : (0,0)
DAA(level5) IPv6 Up packets number(high,low) : (0,0)
DAA(level5) IPv6 Up bytes number(high,low) : (0,0)
DAA(level5) IPv6 Down packets number(high,low) : (0,0)
DAA(level5) IPv6 Down bytes number(high,low) : (0,0)
               .................
               .................
# Display information about copying user accounting packets to multiple accounting copy servers.
<HUAWEI> system-view
[~HUAWEI] display access-user user-id 0 verbose
  -------------------------------------------------------------------
               .................  
               .................

AAA:
               .................  
               .................
  Account-copy-group: zr
    Template: huawei3                                  Interval: 67 min
    Template: huawei5                                  Interval: 89 min
    Template: huawei6                                  Interval: 90 min
    Template: huawei7                                  Interval: 200 min
    Template: huawei8                                  Interval: 56 min
    Template: huawei9                                  Interval: 88 min
    Template: huawei1                                  Interval: 6 min
    Template: huawei4                                  Interval: 88 min
Active EDSG services by order:
  Service0 info : b
  Service1 info : c
  Service2 info : d
  Service3 info : e
  EDSG information:
  Service info : Ab
  Service info : Ac
  Service info : Ad
  Service info : Ae



               .................  
               .................
  -------------------------------------------------------------------
# Display interface VPN instance information about the online users with user-id as 100.
<HUAWEI> display access-user user-id 100 verbose
-------------------------------------------------------------------                                                               
                .......................
                .......................
                                                                                               
VPN&Policy-route:                                                                                                                   
  Vpn-Instance                  : -                                                                                                 
  Vpn-Instance(Interface)       : wjh      
        
  
                .......................
                .......................
# Display verbose information about the online users with user-id as 100.
<HUAWEI> display access-user user-id 100 verbose
  -------------------------------------------------------------------                                                               
Basic:                                                                                                                              
  User access index             : 100                                                                                               
  State                         : Used/Active                                                                                       
  User name                     : R8-0201023000000000@lcw                                                                           
  Domain name                   : lcw                                                                                               
  User backup state             : No                                                                                                
  RUI user state                : -                                                                                                 
  User access interface         : GigabitEthernet 0/1/1                                                                          
  User access PeVlan/CeVlan     : -/-                                                                                               
  User access slot              : 1                                                                                                 
  User MAC                      : 00e0-fc12-3456                                                                                    
  User IP address               : 10.0.100.155                                                                                      
  User IP netmask               : 255.255.255.255                                                                                   
  User gateway address          : 10.0.0.1                                                                                          
  User Authen IP Type           : ipv4/-/-                                                                                          
  User Basic IP Type            : -/-/-                                                                                             
  Server IP                     : 10.0.0.1                                                                                          
  User lease                    : 2001-05-29 22:29:24---2001-06-01 22:29:24                                                         
  Remain lease(sec)             : 212875                                                                                            
  User access type              : IPOE                                                                                              
  User authentication type      : Bind authentication                                                                               
  Agent-Circuit-Id              : -                                                                                                 
  Agent-Remote-Id               : -                                                                                                 
  Access-line-id Information(dhcpv4 option82): -                                                                                    
  Access start time             : 2001-05-29 22:29:24                                                                               
  User-Group                    : -                                                                                                 
  Next-hop                      : -                                                                                                 
  Policy-route-IPV6-address     : -                                                                                                 
AAA:                                                                                                                                
  Server-template of second acct: -                                                                                                 
  Current authen method         : No authentication                                                                                 
  Authen result                 : Success                                                                                           
  Current author method         : Idle                                                                                              
  Author result                 : Idle                                                                                              
  Action flag                   : Idle                                                                                              
  Authen state                  : Authed                                                                                            
  Author state                  : Idle                                                                                              
  Configured accounting method  : No accounting                                                                                     
  Quota-out                     : Offline                                                                                           
  Current accounting method     : No accounting                                                                                     
  Realtime-accounting-switch            : Close                                                                                     
  Realtime-accounting-interval(sec)     : -                                                                                         
  Realtime-accounting-send-update       : No                                                                                        
  Realtime-accounting-traffic-update    : No                                                                                        
  Accounting start time         : 2001-05-29 22:29:24                                                                               
  Online time (h:min:sec)       : 12:52:05                                                                                          
  Accounting state              : Ready                                                                                             
  Accounting session ID         : HUAWEI030000000000004dce2aAAAAAA                                                                  
  MTU                           : 1500                                                                                              
  Idle-cut direction            : Both                                                                                              
  Idle-cut-data (time,rate,idle): 0 sec, 60 kbyte/min, 0 min 0 sec                                                                  
  Ipv4 Realtime speed           : 0 kbyte/min                                                                                       
  Ipv4 Realtime speed inbound   : 0 kbyte/min                                                                                       
  Ipv4 Realtime speed outbound  : 0 kbyte/min                                                                                       
Dot1X:                                                                                                                              
  User MSIDSN name              : -                                                                                                 
  EAP user                      : No                                                                                                
  MD5 end                       : No                                                                                                
VPN&Policy-route:                                                                                                                   
  Vpn-Instance                  : -                                                                                                                                                                                               
Multicast Service:                                                                                                                  
  Multicast-profile             : -                                                                                                 
  Multicast-profile-ipv6        : -                                                                                                 
  Max Multicast List Number     : 4                                                                                                 
  IGMP enable                   : Yes
  PIM-SM enable                 : No
  PIM-SM-V6 enable              : Yes                                                                                                
ACL&QoS:                                                                                                                            
  Link bandwidth auto adapt     : Disable                                                                                           
  UpPriority                    : Unchangeable                                                                                      
  DownPriority                  : Unchangeable                                                                                      
  TrafficPolicy                 : abc(Radius) 

Flow Statistic:                                                                                                                     
  If flow info contain l2-head  : Yes                                                                                               
  Flow-Statistic-Up             : Yes                                                                                               
  Flow-Statistic-Down           : Yes                                                                                               
  Up packets number(high,low)   : (0,0)                                                                                             
  Up bytes number(high,low)     : (0,0)                                                                                             
  Down packets number(high,low) : (0,0)                                                                                             
  Down bytes number(high,low)   : (0,0)                                                                                             
  IPV6 Up packets number(high,low)     : (0,0)                                                                                      
  IPV6 Up bytes number(high,low)       : (0,0)                                                                                      
  IPV6 Down packets number(high,low)   : (0,0)                                                                                      
  IPV6 Down bytes number(high,low)     : (0,0)                                                                                      
Dslam information :                                                                                                                 
  Circuit ID                       :-                                                                                               
  Remote ID                        :-                                                                                               
  Actual datarate upstream         :0(Kbps)                                                                                         
  Actual datarate downstream       :0(Kbps)                                                                                         
  Min datarate upstream            :0(Kbps)                                                                                         
  Min datarate downstream          :0(Kbps)                                                                                         
  Attainable datarate upstream     :0(Kbps)                                                                                         
  Attainable datarate downstream   :0(Kbps)                                                                                         
  Max datarate upstream            :0(Kbps)                                                                                         
  Max datarate downstream          :0(Kbps)                                                                                         
  Min lowpower datarate upstream   :0(Kbps)                                                                                         
  Min lowpower datarate downstream :0(Kbps)                                                                                         
  Max delay upstream               :0(s)                                                                                            
  Max delay downstream             :0(s)                                                                                            
  Actual delay upstream            :0(s)                                                                                            
  Actual delay downstream          :0(s)                                                                                            
  Access loop encapsulation        :0x000000                                                                                        
  -------------------------------------------------------------------
Table 1 Description of the display access-user user-id verbose command output
Item Description
DAA information

DAA information.

Service info

Service information.

Service info(Level1)

Service information(Level1).

Service info(Level2)

Service information(Level2).

Service info(Level3)

Service information(Level3).

Service info(Level4)

Service information(Level4).

Service info(Level5)

Service information(Level5).

Service info(Level6)

Service information(Level6).

Service info(Level7)

Service information(Level7).

Service info(Level8)

Service information(Level8).

Active DAA services by order

Display activated DAA services in the matching order.

Active EDSG services by order

Currently activated EDSG services.

Value-added-service Flow Statistic

VAS traffic statistics collection.

Flow Statistic

Traffic statistics collection.

DAA(level1) IPv6 Up packets number(high,low)

Number of upstream IPv6 DAA service (level 1) packets.

DAA(level1) IPv6 Up bytes number(high,low)

Number of upstream IPv6 DAA service (level 1) bytes.

DAA(level1) IPv6 Down packets number(high,low)

Number of downstream IPv6 DAA service (level 1) packets.

DAA(level1) IPv6 Down bytes number(high,low)

Number of downstream IPv6 DAA service (level 1) bytes.

Up packets number(high,low)

Number of packets sent by IPv4 users.

The formula is as follows: Number of packets = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of packets = 1 x 4294967296 + 705032704 = 5000000000.

  • The maximum value of low is 4294967295.
  • The maximum value of high is 4294967295.
Up bytes number(high,low)

Number of bytes sent by IPv4 users.

The formula is as follows: Number of bytes = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of bytes = 1 x 4294967296 + 705032704 = 5000000000.

  • The maximum value of low is 4294967295.
  • The maximum value of high is 4294967295.
Down packets number(high,low)

Number of packets sent to IPv4 users.

The formula is as follows: Number of packets = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of packets = 1 x 4294967296 + 705032704 = 5000000000.

  • The maximum value of low is 4294967295.
  • The maximum value of high is 4294967295.
Down bytes number(high,low)

Number of bytes sent to IPv4 users.

The formula is as follows: Number of bytes = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of bytes = 1 x 4294967296 + 705032704 = 5000000000.

  • The maximum value of low is 4294967295.
  • The maximum value of high is 4294967295.
DAA(level5) IPv6 Up packets number(high,low)

Number of upstream IPv6 DAA service (level 5) packets.

DAA(level5) IPv6 Up bytes number(high,low)

Number of upstream IPv6 DAA service (level 5) bytes.

DAA(level5) IPv6 Down packets number(high,low)

Number of downstream IPv6 DAA service (level 5) packets.

DAA(level5) IPv6 Down bytes number(high,low)

Number of downstream IPv6 DAA service (level 5) bytes.

EDSG information

EDSG information delivered through authentication response packets.

Service0 info

Information about the services that have been activated.

Service1 info

Information about the services that have been activated.

Service2 info

Information about the services that have been activated.

Service3 info

Information about the services that have been activated.

Vpn-Instance

Name of a VPN instance.

Vpn-Instance(Interface)

Name of a interface VPN instance.

User access index

Index number of a user.

User name

User name.

User backup state

User information backup status.

User access interface

Name of the interface.

User access PeVlan/CeVlan

Outer/inner VLAN tag of a QinQ packet.

User access slot

The ID of the slot.

User MAC

MAC address of a user.

User IP address

IP address of the user.

User IP netmask

Mask of the user IP address.

User gateway address

Gateway address of the user.

User Authen IP Type

IP address type that can be used for user authorization. The value is in the ipv4/ipv6/ipv6-pd format, and a dash (-) is displayed if an IP address type is not supported, such as ipv4/-/-.

  • ipv4: An IPv4 address can be assigned.
  • ipv6: An IPv6 address can be assigned.
  • ipv6-pd: An IPv6 prefix can be assigned.
  • -: No IP address or prefix can be assigned.
User Basic IP Type

Basic IP protocol of a user. The value is in the ipv4/ipv6/ipv6-pd format, and a dash (-) is displayed if a protocol is not the basic IP protocol, such as ipv4/-/-.

  • ipv4: IPv4 is a basic protocol.
  • ipv6: IPv6 is a basic protocol.
  • ipv6-pd: IPv6 PD is a basic protocol.
  • -: The protocol is not a basic protocol.
User lease

User lease.

User access type

Access type of a user.

User authentication type

Authentication type of an access user.

User MSIDSN name

MSIDSN name of a user.

State

State of the user entry.

  • Used: The user entry is being used.
  • Unused: The user entry is not used.
  • Active: The user entry is in a valid state.
  • Standby: The user entry is ready to be used.
Domain name

Name of the domain to which a user belongs.

RUI user state

Status of the remote backup profile bound to the RUI user.

  • Master: indicates that the remote backup profile bound to the RUI user is the master.
  • Slave: indicates that the remote backup profile bound to the RUI user is the slave.
  • -: indicates that users are non-RUI access users.
Authen result

Authentication result.

  • Failure: The authentication fails.
  • Success: The authentication succeeds.
Authen state

User authentication state.

  • Idle: idle state.
  • Authed: Authentication is complete.
  • Authen wait: The user is waiting to be authenticated.
  • Invalid: invalid authentication state.
Basic

Basic information.

Server IP

IP address of the DHCPv4 server that allocates IP addresses to the user.

Remain lease(sec)

Remaining IP address lease ( in seconds).

Agent-Circuit-Id

Specifies the agent-circuit-id (a sub-option of dhcpv4 option 82/dhcpv6 option18) value.

Agent-Remote-Id

Specifies the agent-remote-id (a sub-option of dhcpv4 option 82/dhcpv6 option37) value.

Access-line-id Information

Specifies the information of access-line-id (sub-options of pppoe+ option 82).

Access start time

Time when a user accesses the.

Access loop encapsulation

Encapsulation mode of the access circuit.

User-Group

Group to which a user belongs to.

Next-hop

IP address of the next hop.

Policy-route-IPV6-address

IPv6 address used in IPv6 policy-based routing.

Server-template of second acct

Server template used by a user for second accounting.

Current authen method

Current authentication mode.

  • Invalid: invalid authentication mode.
  • None: Authentication is not performed.
  • Local authentication: Authentication is performed on the local device.
  • RADIUS authentication: Authentication is performed on the RADIUS server.
  • HWTACACS authentication: Authentication is performed on the HWTACACS server.
Current author method

Current authorization mode.

  • Idle: invalid authorization mode.
  • No authorization: Authorization is not performed.
  • Local authorization: Authorization is performed on the local device.
  • If-authenticated authorization: The authorization mode is determined by the authentication result.
  • HWTACACS authorization: Authorization is performed on the HWTACACS server.
Current accounting method

Accounting method configured for a user.

Author result

Authorization result.

  • Failure: The authorization fails.
  • Success: The authorization succeeds.
  • Idle: Authorization is not performed.
Author state

Authorization state.

  • Idle: idle state.
  • Wait client-authorack: The server is waiting for the authorization response from the client.
  • Wait server-authorack: The client is waiting for the authorization response from the server.
  • Invalid: invalid authorization state.
Action flag

User action flag.

  • Idle: idle state.
  • New_user authen: new user authentication request processing.
  • User reauthen: user re-authentication processing.
  • Logout: logout processing.
  • Leaving: offline processing.
  • Author modify: authorization delivery processing.
  • User up: online request processing.
  • Invalid: invalid action.
Configured accounting method

Configured accounting mode.

  • No accounting: No accounting is performed.
  • Local accounting: Accounting is performed on the local device.
  • RADIUS accounting: Accounting is performed on the RADIUS server.
  • Local RADIUS accounting: Accounting is performed on both the local device and RADIUS accounting server.
  • HWTACACS accounting: Accounting is performed on the HWTACACS accounting server.
  • Local HWTACACS accounting: Accounting is performed on both the local device and HWTACACS accounting server.
  • Invalid: invalid accounting mode.
Quota-out

Policy to be adopted in case that the quota is used up.

Realtime-accounting-switch

Whether real-time accounting is enabled.

Realtime-accounting-interval(sec)

Real-time accounting interval(sec).

Realtime-accounting-send-update

Whether the sends real-time accounting packets immediately after receiving an accounting reply packet.

Realtime-accounting-traffic-update

Whether the sends real-time accounting packets when updating traffic.

Accounting start time

Time to perform accounting for users.

Accounting state

Accounting state.

  • Idle: idle state.
  • Ready: Accounting is ready to be performed.
  • Accounting: Accounting is being performed.
  • Leaving flow query: An offline traffic query response is being waited.
  • Wait acct start: An accounting start response is being waited.
Accounting session ID

Accounting session ID.

Online time (h:min:sec)

Duration a user is online(h:min:sec).

MTU

Maximum transmission unit.

Idle-cut direction

Idle cut direction.

Idle-cut-data (time,rate,idle)

Parameters of idle cut in the current domain (time,rate,idle).

Ipv4 Realtime speed

Real-time traffic rate of Ipv4 access users.

Ipv4 Realtime speed inbound

Real-time transmission rate of upstream Ipv4 traffic.

Ipv4 Realtime speed outbound

Real-time transmission rate of downstream IPv4 traffic.

EAP user

Whether the user is an EAP user.

MD5 end

Whether the user information is terminated through EAP.

Multicast Service

Multicast service information.

Multicast-profile

Multicast profile used by users in the current domain.

Multicast-profile-ipv6

Multicast profile used by IPv6 users in the current domain.

Max Multicast List Number

Maximum number of multicast profiles that can be bound to a domain.

Max datarate upstream

Maximum upstream traffic rate.

Max datarate downstream

Maximum downstream traffic rate,

Max delay upstream

Maximum upstream delay.

Max delay downstream

Maximum downstream delay.

IGMP enable

Whether IGMP is enabled.

PIM-SM enable

Whether PIM-SM-V4 is enabled.

PIM-SM-V6 enable

Whether PIM-SM-V6 is enabled.

Link bandwidth auto adapt

Auto link bandwidth adjustment.

UpPriority

Priority of traffic sent by access users.

DownPriority

Priority of traffic sent to access users.

TrafficPolicy

Used traffic policy.

If flow info contain l2-head

Whether a packet contains a layer 2 header.

Flow-Statistic-Up

Statistics about traffic sent by access users.

Flow-Statistic-Down

Statistics about traffic sent to access users.

IPV6 Up packets number(high,low)

Number of packets sent by IPv6 users.

The formula is as follows: Number of packets = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of packets = 1 x 4294967296 + 705032704 = 5000000000.

  • The maximum value of low is 4294967295.
  • The maximum value of high is 4294967295.
IPV6 Up bytes number(high,low)

Number of bytes sent by IPv6 users.

The formula is as follows: Number of bytes = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of bytes = 1 x 4294967296 + 705032704 = 5000000000.

  • The maximum value of low is 4294967295.
  • The maximum value of high is 4294967295.
IPV6 Down packets number(high,low)

Number of packets sent to IPv6 users.

The formula is as follows: Number of packets = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of packets = 1 x 4294967296 + 705032704 = 5000000000.

  • The maximum value of low is 4294967295.
  • The maximum value of high is 4294967295.
IPV6 Down bytes number(high,low)

Number of bytes sent to IPv6 users.

The formula is as follows: Number of bytes = 4294967296 x high + low. For example, if high is 1 and low is 705032704, the number of bytes = 1 x 4294967296 + 705032704 = 5000000000.

  • The maximum value of low is 4294967295.
  • The maximum value of high is 4294967295.
Dslam information

DSLAM service information.

Circuit ID

ID of an attachment circuit.

Remote ID

ID of a remote agent.

Actual datarate upstream

Actual upstream traffic rate.

Actual datarate downstream

Actual downstream traffic rate.

Actual delay upstream

Actual upstream delay.

Actual delay downstream

Actual downstream delay.

Min datarate upstream

Minimum upstream traffic rate.

Min datarate downstream

Minimum downstream traffic rate.

Min lowpower datarate upstream

Minimum upstream traffic rate in the low power state.

Min lowpower datarate downstream

Minimum downstream traffic rate in the low power state.

Attainable datarate upstream

Available upstream traffic rate.

Attainable datarate downstream

Available downstream traffic rate.

Template

Name of the RADIUS accounting copy server group.

Interval

Interval for copying accounting packets to each accounting copy server group.

Account-copy-group

Name of the accounting copy group.

AAA

AAA service information.

Dot1X

Dot1X service information.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >