display user-manage online-user

Function

The display user-manage online-user command displays information about online users.

Format

display user-manage online-user [ verbose ] [ group group-name | ipv4-range start-ipv4-address end-ipv4-address | ipv6-range start-ipv6-address end-ipv6-address | security-group security-group-name | user user-name ]

display user-manage online-user type { external-user | local-user } [ verbose ]

Parameters

Parameter	Description	Value
group group-name	Specifies the name of a user group.	The value must be the name (with the group path) of an existing user group.
ipv4-range start-ipv4-address end-ipv4-address	Specifies an IPv4 address range. If the end-ipv4-address value is the same as the start-ipv4-address value, information about the online user at this IPv4 address is displayed.	The value is in dotted decimal notation.
ipv6-range start-ipv6-address end-ipv6-address	Specifies an IPv6 address range. If the end-ipv6-address value is the same as the start-ipv6-address value, information about the online user at this IPv6 address is displayed.	The value is in hexadecimal notation.
security-group security-group-name	Specifies the name of a security group.	The value must be the name of an existing security group.
user user-name	Specifies the login name or display name of a user.	The value must be an existing login name or display name of a user.
type	Specifies the type of a user.	-
external-user	Displays the information about the external user. An external user is an online user whose information does not exist in the local database.	-
local-user	Displays the information about the local user.	-
verbose	Displays detailed information about online users. If this parameter is not specified, brief information about the online users is displayed.	-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

None

Example

# Display brief information about the online users.

<sysname> display user-manage online-user
 Current Total Number: 1  
                                                                                
 IP                                             User Name
--------------------------------------------------------------------------------
 10.1.1.1                                       test  
--------------------------------------------------------------------------------

# Display details about the online user test.

<sysname> display user-manage online-user verbose user test
 Current Total Number: 1
--------------------------------------------------------------------------------
 IP Address: 10.3.3.6
 Login Time: 2011-12-16 12:03:13  Online Time: 00:00:10
 State: Active  TTL: 00:30:00  Left Time: 00:30:00
 Access Type: local
 Authentication Mode: Authentication Exemption (IP/MAC Bind User) Bind Mode: Bidirectional
 Access Device Type: unknown
 Downlink Packets: 8 bytes: 1590  Uplink Packets: 8 bytes: 1389
 Downlink Rate: 23 kbps     Uplink Rate: 750 kbps
 Build ID: 0
 User Name: test  Parent User Group: /default
 Security-group Name: security-group1
 User Mac: 5844-98a1-e116
 AP Mac: 643e-8c3c-a200
 Site Code: xxxxxxxxxxxxxx
--------------------------------------------------------------------------------

**Table 1** Description of the **display user-manage online-user verbose** command output
Item	Description
Current Total Number	Number of current online users
IP Address	IP address of an online user
Login Time	Login time of an online user
Online Time	Online period of a user
State	Status of an online user: Frozen: The online user is locked out. Active: The user is online.
TTL	Lockout duration of an online user when State is set to Frozen Timeout period of an online user when State is set to Active
Left Time	Unlocking remaining duration of an online user when State is set to Frozen Remaining online period of an online user when State is set to Active
Access Type	Access type of authenticating an online user: local: Th access type of the online user is Internet access. ppp: The access type of the online user is ppp. ssl vpn: The access type of the online user is SSL VPN. ipsec: The access type of the online user is IPSec VPN. wired-portal: The access type of an online user is wired-portal. wireless-portal: The access type of an online user is wireless-portal. wired-802.1x: The access type of an online user is wired-802.1x. wireless-802.1x: The access type of an online user is wireless-802.1x. The last four access types are valid only to Agile Controller SSO users.
Authentication Mode	Method of authenticating an online user: Authentication Exemption (IP/MAC Bind User): The user is exempted from authentication and bound to an IP/MAC address. Password (Local): The user is authenticated using the local password. Password (AD): The user is authenticated using the AD server password. Password (HWTACACS): The user is authenticated using the HWTACACS server password. Password (LDAP): The user is authenticated using the LDAP server password. Password (RADIUS): The user is authenticated using the RADIUS server password. Single Sign-on: The user is authenticated using SSO. anonymous: The user is authenticated using anonymous authentication.
Bind Mode	Binding mode between an online user and the IP/MAC address: Bidirectional Unidirectional The field is available only when Authentication Mode is set to Authentication Exemption (IP/MAC Bind User).
Access Device Type	Type of device accessed by a Agile Controller SSO user, such as Windows_7 or Huawei-android. If the access device type of a user is unavailable or a user uses other authentication modes, the field value is unknown.
Build ID	Build ID of an online user entry. The value can be: 0: The entry is locally created. Non-0 integer: The entry is synchronized from another device. The value is not 0 only when the RADIUS SSO information synchronization function is configured. The value indicates the ID of another device.
Downlink Packets	Number of downstream packets.
Uplink Packets	Number of upstream packets.
Downlink Rate	Downlink rate of an online user.
Uplink Rate	Uplink rate of an online user.
User Name	Login name
Parent User Group	Name of the parent group of an online user (with the group path)
Security-group Name	Name of the parent security group of an online user The field is available only when the parent security group of the online user exists.
User Mac	MAC address of the user device In wireless Internet access authentication for non-operating public places, this parameter is displayed only when you view online user information on the FW.
AP Mac	AP MAC address In wireless Internet access authentication for non-operating public places, this parameter is displayed only when you view online user information on the FW.
Site Code	Address code In wireless Internet access authentication for non-operating public places, this parameter is displayed only when you view online user information on the FW.