AAA Configuration Commands 365
View
System View
Parameter
isp-name
: Specifies an ISP domain name. The name is expressed with a character
string not exceeding 24 characters, excluding “/”, “: ”, “*”, “? ”, “<”, and “>”.
default enable
isp-name
: Enables the default ISP domain specified by
isp-name
.
default disable: Restores the default ISP domain to
default
system
.
Description
Use the domain command to configure an ISP domain or enter the view of an
existing ISP domain. Use the
undo domain command to cancel a specified ISP
domain.
By default, a domain named default system has been created in the system. The
attributes of default system are all default values.
ISP domain is a group of users belonging to the same ISP. Generally, for a
username in the userid@isp-name format, taking
gw20010608@3Com163.net as an
example, the isp-name (that is,
3Com163.net) following the @ is the ISP domain
name. When 3Com 5500 Series Ethernet Switches control user access, as for an
ISP user whose username is in
userid@isp-name format, the system will take
userid part as username for identification and take isp-name part as domain
name.
The purpose of introducing ISP domain settings is to support the application
environment with several ISP domains. In this case, an access device may have
supplicants from different ISP domains. Because the attributes of ISP users, such as
username and password structures, service types, may be different, it is necessary
to separate them by setting ISP domains. In ISP Domain View, you can configure a
complete set of exclusive ISP domain attributes for each ISP domain, which
includes AAA schemes ( RADIUS scheme applied and so forth.)
For a Switch, each supplicant belongs to an ISP domain. The system supports up to
16 ISP domains. If a user has not reported its ISP domain name, the system will
put it into the default domain.
When this command is used, if the specified ISP domain does not exist, the system
will create a new ISP domain. All the ISP domains are in the
active state when
they are created.
Related commands: access-limit, radius scheme, state, display domain.
Example
To create a new ISP domain, marlboro.net, and enters its view, enter the following:
<SW5500>system-view
System View: return to User View with Ctrl+Z.
[SW5500]domain marlboro.net
New Domain added.
[SW5500-isp-marlboro.net]
To Next Page
Loading...
