The sync-address command sets a source IP address range for online user synchronization from a Agile Controller server. Only the users whose source IP addresses are in the specified range can be queried and synchronized.
The undo sync-address command cancels the setting.
sync-address { address-set address-set-name | ip-address { mask-length | mask mask-address } | range { start-address end-address } }
undo sync-address
| Parameter | Description | Value |
|---|---|---|
| address-set address-set-name | Specifies a source IP address range by referencing an address or address group. | The address and address group must exist. |
| ip-address mask-length | Specifies a source IP address range by specifying an IP address and a mask length. | The IP address is in dotted decimal notation, and the mask length is an integer ranging from 1 to 32. |
| ip-address mask mask-address | Specifies a source IP address range by specifying an IP address and a mask address. | The value is in dotted decimal notation. |
| range { start-address end-address } | Specifies a source IP address range by specifying an IP address range. | The value is in dotted decimal notation. |
By default, no source IP address range is specified for online user synchronization from a Agile Controller server. Online user synchronization from a Agile Controller server can be enabled using the enable command only after a source IP address range is specified.
The source IP address range must be consistent with the user IP address range configured for users who go online on the FW in Agile Controller SSO mode. The source IP address range is the IP address range specified in Terminal IP Address List when the FW is deployed on the Agile Controller server as a network access management device.
If the command is run several times, the latest configuration overrides the previous one.