HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

44
• The ISP domain in the username
• The default ISP domain of the device
• The ISP domain specified for users with unknown domain names
If all the domains are unavailable, user authentication will fail.
NOTE:
Support for the authentication domain configuration depends on the access module. You can
specify an authentication domain for 802.1X, portal, or MAC address authentication.
To create an ISP domain:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Create an ISP domain and
enter ISP domain view.
domain
isp-name N/A
3. Return to system view.
quit
N/A
4. Specify the default ISP
domain.
domain default enable
isp-name
Optional.
By default, the default ISP domain is the
system-defined ISP domain
system
.
5. Specify an ISP domain for
users with unknown domain
names.
domain if-unknown
isp-name
Optional.
By default, no ISP domain is specified
for users with unknown domain names.
To delete the ISP domain that is functioning as the default ISP domain, you must change it to a
non-default ISP domain by using the undo domain default enable command.
Configuring ISP domain attributes
In an ISP domain, you can configure the following attributes:
• Domain status—By placing the ISP domain to the active or blocked state, you allow or deny
network service requests from users in the domain.
• Maximum number of online users—The device controls the number of online users in a
domain to ensure the system performance and service reliability.
• Idle cut—Enables the device to check the traffic of each online user in the domain at the idle
timeout interval, and to log out any user in the domain whose traffic during the idle timeout
period is less than the specified minimum traffic.
• Self-service server location—Allows users to access the self-service server to manage their
own accounts and passwords.
• IP address pool for allocating addresses to PPP users—The device assigns IP addresses
from the pool to PPP users in the domain.
• Default authorization user profile—If a user passes authentication but is authorized with no
user profile, the device authorizes the default user profile of the ISP domain to the user and
restricts the user's behavior based on the profile. For more information about user profiles, see
"Configuring user profiles."
An ISP domain attribute applies to all users in the domain.
A self-service RADIUS server running on CAMS or IMC is required for the self-service server
location function to work.
To configure ISP domain attributes:

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English