Configuring Isp Domain Attributes - HP VSR1000 Security Configuration Manual

The authentication domain specified for the access module. You can specify an authentication
•
domain for portal authentication.
The ISP domain in the username.
•
The default ISP domain of the device.
•
The ISP domain configured for users that include unknown domain names.
•
If none of the previous domains is available, user authentication fails.
When you modify or delete an ISP domain, follow these restrictions and guidelines:
You can modify the settings of the system-defined ISP domain system, but you cannot delete the
•
domain.
An ISP domain cannot be deleted when it is used as the default ISP domain. Before you use the
•
undo domain command, change the domain to a non-default ISP domain by using the undo
domain default enable command.
• An ISP domain cannot be deleted when it is specified for users that include unknown domain names.
Before you use the undo domain command, restore the default setting of the domain by using the
undo domain if-unknown command.
To create an ISP domain:
Step
1. Enter system view.
2. Create an ISP domain and
enter ISP domain view.
3. Return to system view.
4. (Optional.) Specify the default
ISP domain.
5. (Optional.) Specify the ISP
domain used by users that
include unknown domain
names.

Configuring ISP domain attributes

In an ISP domain, you can configure the following attributes:
• Domain status—By placing the ISP domain in active or blocked state, you allow or deny network
service requests from users in the domain.
Maximum number of online users—The device controls the number of online users in a domain to
•
ensure the system performance and service reliability.
Authorization attributes—The device supports the following authorization attributes:
•
Idle cut—Enables the device to check the traffic of each online user in the domain at the idle
timeout interval. The device logs out any users in the domain whose total traffic in the idle
timeout period is less than the specified minimum traffic. The idle cut attribute configured in the
ISP domain takes precedence over the idle cut attribute assigned by server.
IP address pool for PPP users—The device assigns IP addresses from the pool to authenticated
PPP users in the domain. The IP address pool attribute assigned by server takes precedence over
the idle cut attribute configured in the ISP domain.
Command
system-view
domain isp-name
quit
domain default enable
isp-name
domain if-unknown
isp-domain-name
44
Remarks
N/A
By default, the device has a
system-defined ISP domain system.
N/A
By default, the default ISP domain is the
system-defined ISP domain system.
By default, no ISP domain is specified for
users that include unknown domain
names.