display aaa

Function

The display aaa command displays information about normal logout, abnormal logout, and login failures.

Format

display aaa { offline-record | abnormal-offline-record | online-fail-record } { all | access-slot slot-id | reverse-order | domain domain-name | interface interface-type interface-number [ vlan vlan-id ] | ip-address ip-address [ vpn-instance vpn-instance-name ] | mac-address mac-address | time start-time end-time [ date start-date end-date ] | username user-name [ time start-time end-time [ date start-date end-date ] ] } [ brief ] [ slot slot-id cpu cpu-id ]

Parameters

Parameter	Description	Value
offline-record	Displays normal logout records.	-
abnormal-offline-record	Displays abnormal logout records.	-
online-fail-record	Displays login failure records.	-
all	Displays all login and logout records.	-
access-slot slot-id	Specifies the slot ID of an interface card.	-
reverse-order	Displays the records in order of newest to oldest.	-
domain domain-name	Specifies the name of a domain.	The value must be an existing domain.
interface interface-type interface-number	Specifies the type and number of an interface.	-
vlan vlan-id	Specifies a VLAN that interfaces belong to.	The value is an integer that ranges from 1 to 4094.
ip-address ip-address	Specifies an IP address.	The value is in dotted decimal notation.
vpn-instance vpn-instance-name	Indicates the name of the VPN instance that the specified IP address belongs to.	The value must be an existing VPN instance.
mac-address mac-address	Specifies a MAC address.	The value is in H-H-H format. An H is a 4-digit hexadecimal number.
username user-name	Specifies a user.	The value must be an existing user.
time start-time end-time	Specifies a time range.	The format is HH:MM:SS, indicating hour:minute:second.
date start-date end-date	Specifies a date.	The format is YYYY/MM/DD. YYYY is the year, MM is the month, and DD is the day.
brief	Displays brief login and logout information.	-
slot slot-id	Specifies the slot ID of a service processing unit (SPU).Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.	-
cpu cpu-id	Specifies a CPU ID.Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.	-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

This command allows you to view information about user normal logouts, abnormal logouts, and login failures based on the domain name, interface, IP address, VPN instance, MAC address, or slot ID.

Precautions

Only letters, digits, and special characters can be displayed for username. It supports English, Chinese, and Russian. The coding format used by the Telnet terminal must be the same as the coding format used by the user name input device. Otherwise, the user name in the language other than English may not be normally displayed.

When the value of username contains special characters or characters in other languages except English, the device displays dots (.) for these characters. If there are more than three such consecutive characters, three dots (.) are displayed. Here, the special characters are the ASCII codes smaller than 32 (space) or larger than 126 (~).

Example

# Display information about user normal logouts.

<sysname> display aaa offline-record all
  ------------------------------------------------------------------------------
  User name             : admin                                                 
  Domain name           :                                                       
  User MAC              : -                                                     
  User access type      : Telnet                                                
  User IP address       : 10.177.19.212                                         
  User ID               : 3                                                     
  User login time       : 2015/04/14 20:20:25                                   
  User offline time     : 2015/04/14 20:28:42                                   
  User offline reason   : user request to offline                               
  User name to server   : admin 
    ------------------------------------------------------------------------------
  Are you sure to display some information?(y/n)[y]:y

**Table 1** Description of the **display aaa offline-record** command output
Item	Description
User name	User name.
Domain name	Domain of a user.
User MAC	MAC address of a user.
User access type	Access type of a user.
User IP address	IP address of a user.
User ID	Index of a user.
User login time	Time when a user goes online.
User offline time	Time when a user goes offline.
User offline reason	Reason why a user goes offline.
User name to server	User name sent by the device to the server.