sub-reason mapping

Function

The sub-reason mapping command maps login failure and logout sub-reasons to general reasons.

The undo sub-reason mapping command cancels the mappings between login failure and logout sub-reasons and general reasons.

By default, login failure or logout sub-reasons are not mapped to general reasons.

This command is supported only on the NetEngine 8000 F1A.

Format

sub-reason start-reason [ end-reason ] mapping mapping-reason

undo sub-reason start-reason [ end-reason ] [ mapping mapping-reason ]

Parameters

Parameter	Description	Value
mapping mapping-reason	Specifies a general reason ID to which sub-reason IDs are to be mapped.	The value is an integer that ranges from 1 to 854.
sub-reason start-reason	Specifies the start sub-reason ID.	The value is an integer. The minimum value is 1, and the maximum value increases with the increase in sub-reasons. For the supported value range, see the command help.
sub-reason end-reason	Specifies the end sub-reason ID.	The value is an integer. The minimum value is 2, and the maximum value increases with the increase in sub-reasons. For the supported value range, see the command help.The end subcause value must be greater than the start subcause value. When the start subcause value is the maximum value, the end subcause cannot be configured.

Parameter

Description

Value

mapping mapping-reason

Specifies a general reason ID to which sub-reason IDs are to be mapped.

The value is an integer that ranges from 1 to 854.

sub-reason start-reason

Specifies the start sub-reason ID.

The value is an integer. The minimum value is 1, and the maximum value increases with the increase in sub-reasons. For the supported value range, see the command help.

sub-reason end-reason

Specifies the end sub-reason ID.

The value is an integer. The minimum value is 2, and the maximum value increases with the increase in sub-reasons. For the supported value range, see the command help.The end subcause value must be greater than the start subcause value. When the start subcause value is the maximum value, the end subcause cannot be configured.

Views

AAA view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
aaa-access	write

Usage Guidelines

Usage Scenario

To map login failure and logout sub-reasons to general reasons, run the sub-reason mapping command. Then, you can check the mappings between login failure and logout sub-reasons and general reasons using the display radius offline-sub-reason command. If no mapping is found, a hyphen (-) is displayed. After the display radius offline-sub-reason command is run, the login failure and logout sub-reasons are displayed as the corresponding general reasons.

To classify login failure and logout sub-reasons into the same categories and better present the reasons, run the sub-reason mapping command to map sub-reasons to general reasons.

Configuration Impact

After the sub-reason mapping command is run, you can view information about the mappings using the display aaa online-fail-record command.

In VS mode, this command is supported only by the admin VS.

Precautions

The device supports a maximum of 64 mappings between sub-reasons and general reasons. If sub-reasons with consecutive IDs are mapped to the same general reason, the mappings are combined into one. If a sub-reason ID is in the range of sub-reasons mapped to a general reason and this sub-reason ID is not the start or end sub-reason ID of the range, the mapping is divided into two mappings after this sub-reason ID is deleted from the mapping.

A sub-reason cannot be specified as both a start or end sub-reason and the general reason to which the sub-reason is mapped.

The undo sub-reason mapping command allows you to delete existing and non-existent sub-reasons with consecutive IDs.

Example

# Map sub-reasons (500 to 710) to the general reason 10.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] sub-reason 500 710 mapping 10