HP MSR Series Configuration Manual page 63

Authorization session group profile—The device restricts authenticated users' behaviors
based on the settings in the authorization session group profile. For portal users, the
authorization session group profile can be configured in a preauthentication domain to
restrict user behaviors before users pass authentication.
Authorization IPv6 address prefix—The device authorizes the IPv6 address prefix to
authenticated IPoE or PPP users in the domain.
IPv6 address pool—The device assigns IPv6 addresses from the pool to authenticated
IPoE, portal, or PPP users in the domain.
DNS server address—The attribute specifies the DNS server that offers DNS services to
the authenticated PPP users in the domain.
Redirect URL—The device redirects PPP users in the domain to the URL after they pass
authentication.
Authorization user group—Authenticated users in the domain obtain all attributes of the
user group.
Authorization VPN instance—The device allows authenticated PPP and IPoE users in the
domain to access network resources in the authorization VPN.
Maximum number of multicast groups—The attribute restricts the maximum number of
multicast groups that an authenticated IPoE, portal, or PPP user can join concurrently.
•
User online duration including idle cut period—If a user goes offline due to connection
failure or malfunction, its online duration sent to the server includes the idle cut period or user
online detection period. The online duration that is generated on the server is longer than the
actual online duration of the user. The user online detection period is supported only by portal
authentication.
•
ITA policy—The attribute allows the device to perform accounting at different charge rates for
user data based on destination addresses. The ITA policy assigned from an AAA server takes
precedence over the ITA policy in an ISP domain.
An ISP domain attribute applies to all users in the domain.
To configure ISP domain attributes:
Step
1. Enter system view.
2. Enter ISP domain view.
3. Place the ISP domain in
active or blocked state.
Command
system-view
domain isp-name
state { active | block }
48
Remarks
N/A
N/A
By default, an ISP domain is in
active state, and users in the
domain can request network
services.