Configuring Isp Domain Attributes; Configuring Aaa Authentication Methods For An Isp Domain - HP A6600 Configuration Manual

NOTE:
To delete the ISP domain that is functioning as the default ISP domain, you must first change it to a non-
default ISP domain by using domain default disable.

Configuring ISP domain attributes

To do...
1. Enter system view.
2. Enter ISP domain view.
3. Place the ISP domain to the
state of active or blocked.
4. Specify the maximum number
of active users in the ISP
domain.
5. Configure the idle cut function.
6. Configure the self-service
server location function.
7. Define an IP address pool for
allocating addresses to PPP
users.
8. Specify the default
authorization user profile.
NOTE:
If a user passes authentication but is authorized with no user profile, the router authorizes the default
•
user profile of the ISP domain to the user and restricts the user's behavior based on the profile. For
more information about user profiles, see
A self-service RADIUS server, such as iMC, is required for the self-service server location function to
•
work.

Configuring AAA authentication methods for an ISP domain

In AAA, authentication, authorization, and accounting are separate processes. Authentication refers to
the interactive authentication process of username/password/user information during an access or
service request. The authentication process neither sends authorization information to a supplicant nor
triggers any accounting.
Command...
system-view
domain isp-name
state { active | block }
access-limit enable max-user-
number
idle-cut enable minute [ flow ]
self-service-url enable url-string
ip pool pool-number low-ip-
address [ high-ip-address ]
authorization-attribute user-
profile profile-name
"Configuring user
41
Remarks
—
—
Optional.
By default, an ISP domain is in the
active state, and users in the domain
can request network services.
Optional.
No limit by default.
Optional.
Disabled by default.
This command is effective for only
LAN users, portal users, and PPP
users.
Optional.
Disabled by default.
Optional.
By default, no IP address pool is
configured for PPP users.
Optional.
By default, an ISP domain has no
default authorization user profile.
profiles."