Configuring Access Guardian Verifying Access Guardian Users
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 28-112
Vlan : 30,
Authentication Type : MAC,
Authentication Status : Authenticated,
Authentication Failure Reason : -,
Authentication Retry Count : -,
Authentication Server IP Used = 10.135.62.129,
Authentication Server Used = rad1,
Server Reply-Message = -,
Profile : Contractor,
Profile Source : Auth - Pass - Default UNP,
Profile From Auth Server : Employee [Not Configured],
Classification profile rule : -,
Role : Contractor,
Role Source : Profile,
User role rule : -,
Restricted Access : No,
Location Policy Status : Passed,
Time Policy Status : Passed,
Captive-Portal Status : Passed,
QMR Status : -,
Redirect Url : -,
SIP Call Type = Not in a call,
SIP Media Type = None,
Applications = ;Facebook;rediff;
For more information about the displays that result from these commands, see the “Access Guardian
Commands” chapter in the OmniSwitch AOS Release 8 CLI Reference Guide.
Logging Users Out of the Network
In the event that it becomes necessary to manually log a user out of the network, the unp user flush
command is available to the switch admin user. The following parameters are available with this
command to specify which user MAC addresses are flushed:
• mac-address—Flushes the user device with the specified source MAC address. For example:
-> unp user flush mac-address 00:2a:95:00:3a:10
• port chassis/slot/port1[-port2]—Flushes the MAC addresses of all users connected to the specified
switch port. For example:
-> unp user flush port 1/9
• linkagg agg_id[-agg_id2]—Flushes the MAC addresses of all users connected to the specified link
aggregate. For example:
-> unp user flush linkagg 10
• sap-id [linkagg] sap_id—Flushes the MAC addresses of all users learned on a specific Service Access
Point (SAP). A SAP ID is comprised of a device-facing port or link aggregate (referred to as a service
access port) and an encapsulation value that is used to identify the type of device traffic to map to the
service that is associated with the SAP. Use the optional linkagg parameter if the SAP ID is for a link
aggregate. For example:
-> unp user flush sap-id 1/1/2:50
• service-id service_id—Flushes the MAC addresses of all users learned on a specific service ID. For
example: