Configuring Isp Domain Attributes - HP 6600 Security Configuration Manual

To delete the ISP domain that is functioning as the default ISP domain, you must change it to a non-default
ISP domain by using the undo domain default enable command.

Configuring ISP domain attributes

In an ISP domain, you can configure the following attributes:
Domain status—By placing the ISP domain to the active or blocked state, you allow or deny
•
network service requests from users in the domain.
Maximum number of online users—The device controls the number of online users in a domain to
•
ensure the system performance and service reliability.
• Idle cut—Enables the device to check the traffic of each online user in the domain at the idle timeout
interval, and to log out any user in the domain whose traffic during the idle timeout period is less
than the specified minimum traffic.
Self-service server location—Allows users to access the self-service server to manage their own
•
accounts and passwords.
IP address pool for allocating addresses to PPP users—The device assigns IP addresses from the
•
pool to PPP users in the domain.
Default authorization user profile—If a user passes authentication but is authorized with no user
•
profile, the device authorizes the default user profile of the ISP domain to the user and restricts the
user's behavior based on the profile. For more information about user profiles, see "Configuring
user profiles."
An ISP domain attribute applies to all users in the domain.
A self-service RADIUS server running on IMC is required for the self-service server location function to
work.
To configure ISP domain attributes:
Step
1. Enter system view.
2. Enter ISP domain view.
3. Place the ISP domain to the
active or blocked state.
4. Specify the maximum
number of online users in the
ISP domain.
5. Configure the idle cut
function.
6. Enable the self-service server
location function and specify
the URL of the self-service
server.
Command
system-view
domain isp-name
state { active | block }
access-limit enable
max-user-number
idle-cut enable minute [ flow ]
self-service-url enable url-string
46
Remarks
N/A
N/A
Optional.
By default, an ISP domain is in active
state, and users in the domain can
request network services.
Optional.
No limit is specified by default.
Optional.
Disabled by default.
This command is effective only for
LAN, portal, and PPP users.
Optional.
Disabled by default.