Display Domain - HP FlexNetwork MSR Series Command Reference Manual

secondary-dns ipv6 ipv6-address: Specifies the IPv6 address of the secondary DNS server for
users. This option is applicable only to IPoE and PPP users.
session-group-profile session-group-profile-name: Specifies an authorization session group
profile for users. The session-group-profile-name argument is a case-sensitive string of 1 to 31
characters. Typically, the attribute applies to authenticated users. If you configure the attribute in a
portal preauthentication domain, the session group profile applies before portal authentication. This
option is applicable only to IPoE, portal, and PPP users.
url url-string: Specifies the URL to which PPP users are redirected after they pass authentication.
The url-string argument is a case-sensitive string of 1 to 255 characters. This option is applicable
only to PPP users.
user-group user-group-name: Specifies a user group for users. The user-group-name argument is a
case-insensitive string of 1 to 32 characters. Authenticated users obtain all attributes of the user
group.
user-profile profile-name: Specifies an authorization user profile. The profile-name argument is a
case-sensitive string of 1 to 31 characters. Typically, the attribute applies to authenticated users. If
you configure the attribute in a portal preauthentication domain, the user profile applies before portal
authentication. This option is applicable only to IPoE, LAN, portal, and PPP users.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the users belong.
The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. When a user
passes authentication, it has permission to access the network resources in the specified VPN. This
option is applicable only to PPP and IPoE users.
Usage guidelines
When the idle cut feature is configured, the device periodically detects the traffic of each online user.
The device logs out users who do not meet the minimum traffic requirement in the idle timeout
period. When the idle cut feature is disabled on the device, the idle cut feature of the server takes
effect. The server considers a user idle if the user's traffic is less than 10240 bytes in a configurable
idle timeout period.
If the server or NAS does not authorize any attributes to an authenticated user, the device authorizes
the attributes in the ISP domain to the user. To specify authorization attributes in the ISP domain, use
the authorization-attribute command.
You can configure multiple authorization attributes for users in an ISP domain. If you execute the
command multiple times with the same keyword specified, the most recent configuration takes
effect.
Examples
# Configure the idle cut feature for users in ISP domain test.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization-attribute idle-cut 30 10240
Related commands

display domain

display domain
Use display domain to display ISP domain configuration.
Syntax
display domain [ isp-name ]
Views
Any view
37