H3C Technologies H3C S7500E Series Switches - Manual (Page 55)

2-26
Configuration Prerequisites
For local authentication of users in an ISP domain, you must configure local user accounts on the
device. For information about local user configuration, see Configuring local user attributes .
For remote authentication, authorization, and accounting, you must create the RADIUS schemes,
and/or HWTACACS schemes to be used. For information about RADIUS scheme configuration, see
Configuring RADIUS Schemes . For information about HWTACACS scheme configuration, see
Configuring HWTACACS Schemes .
Creating an ISP Domain
In a networking scenario with multiple ISPs, an access device may connect users of different ISPs.
Because users of different ISPs may have different user attributes (for example, different username
and password structure, service type, and rights), you must configure ISP domains to distinguish the
users and configure different AAA methods for the ISP domains.
On a NAS, each user belongs to an ISP domain. A NAS can accommodate up to 16 ISP domains,
including the default ISP domain named system. If a user does not provide the ISP domain name at
login, the system considers that the user belongs to the default ISP domain.
Follow these steps to create an ISP domain:
To do… Use the command… Remarks
Enter system view system-view —
Create an ISP domain and enter
ISP domain view
domain isp-name Required
Return to system view quit —
Specify the default ISP domain
domain default enable
isp-name
Optional
By default, the system has a default ISP
domain named system.
You cannot delete the default ISP domain unless you change it to a non-default ISP domain (with the
domain default disable command) first.
Configuring ISP Domain Attributes
Follow these steps to configure ISP domain attributes:
To do… Use the command… Remarks
Enter system view system-view —
Enter ISP domain view domain isp-name —