H3C Technologies H3C S3600 Series Switches - Manual (Page 518)

2-2
Task Remarks
Creating an ISP Domain and Configuring Its
Attributes
Required
Configuring separate AAA schemes Required
Configuring an AAA Scheme for an ISP
Domain
Required
With separate AAA schemes, you
can specify authentication,
authorization and accounting
schemes respectively.
You need to configure RADIUS or
HWATACACS before performing
RADIUS or HWTACACS
authentication.
Configuring Dynamic VLAN Assignment Optional
Configuring the Attributes of a Local User Optional
AAA
configuration
Cutting Down User Connections Forcibly Optional
Creating an ISP Domain and Configuring Its Attributes
Follow these steps to create an ISP domain and configure its attributes:
To do… Use the command… Remarks
Enter system view system-view —
Configure the form of the
delimiter between the
username and the ISP domain
name
domain delimiter { at | dot }
Optional
By default, the delimiter
between the username and the
ISP domain name is “@”.
Create an ISP domain or set an
ISP domain as the default ISP
domain
domain { isp-name | default
{ disable | enable isp-name } }
Required
If no ISP domain is set as the
default ISP domain, the ISP
domain "system" is used as the
default ISP domain.
Set the status of the ISP
domain
state { active | block }
Optional
By default, an ISP domain is in
the active state, that is, all the
users in the domain are allowed
to request network service.
Set the maximum number of
access users that the ISP
domain can accommodate
access-limit { disable |
enable max-user-number }
Optional
By default, there is no limit on
the number of access users
that the ISP domain can
accommodate.
Set the idle-cut function
idle-cut { disable | enable
minute flow }
Optional
By default, the idle-cut function
is disabled.
Set the accounting-optional
switch
accounting optional
Optional
By default, the
accounting-optional switch is
off.