Creating An Isp Domain And Setting The Related Attributes - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
Configure the ISP domain state
Set an access limit
Enable accounting optional
Define a local IP pool and allocate IP addresses to PPP users
2) Create a local user and set the related attributes (for local authentication only)

2.2.1 Creating an ISP Domain and Setting the Related Attributes

I. Creating an ISP domain
An Internet service provider (ISP) domain is a group of users that belong to the same
ISP. For a username in the userid@isp-name format, gw20010608@huawei163.net for
example, the isp-name (huawei163.net) following the @ sign is the ISP domain name.
When receiving a connection request from a user named userid@isp-name, the router
system considers the userid part as the username for authentication and the isp-name
part as the domain name.
The purpose of introducing ISP domain settings is to support the multi-ISP application
environment, where one access device might access users of different ISPs. Because
the attributes of ISP users, such as username and password formats, can be different,
you must differentiate them through setting ISP domains. In ISP domain view, you can
configure a complete set of exclusive ISP domain attributes on a per-ISP domain basis,
including an AAA scheme.
For 3Com Series Routers, each supplicant belongs to an ISP domain. Up to 16
domains can be configured in the system. If a user has not reported its ISP domain
name, the system puts it into the default domain.
Perform the following configurations in system view.
Table 2-4 Create/delete an ISP domain
Create an ISP domain or enter the
view of a specified domain.
Remove a specified ISP domain.
By default, the default ISP domain in the system is system.
II. Configuring an AAA scheme for an domain to reference
You can configure authentication, authorization, and accounting schemes in two
modes:
1) Bundled mode
In bundled mode, you can specify an AAA scheme by using the scheme command. If
you specify a RADIUS or HWTACAS scheme, all of the authentication, authorization,
Operation
3Com Corporation
2-10
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Command
domain [ isp-name | default { disable | enable
isp-name } ]
undo domain isp-name
Configuration