Domain If-Unknown - H3C MSR Series Command Reference Manual

domain

domain if-unknown

Use domain if-unknown to specify an ISP domain that accommodates users that are assigned to
nonexistent domains.
Use undo domain if-unknown to restore the default.
Syntax
domain if-unknown isp-domain-name
undo domain if-unknown
Default
No ISP domain is specified to accommodate users that are assigned to nonexistent domains.
Views
System view
Predefined user roles
network-admin
Parameters
isp-domain-name: Specifies the ISP domain name, a case-insensitive string of 1 to 255 characters.
The name must meet the following requirements:
•
The name cannot contain a forward slash (/), backslash (\), vertical bar (|), quotation marks ("),
colon (:), asterisk (*), question mark (?), left angle bracket (<), right angle bracket (>), or at sign
(@).
•
The name cannot be d, de, def, defa, defau, defaul, default, i, if, if-, if-u, if-un, if-unk,
if-unkn, if-unkno, if-unknow, or if-unknown.
Usage guidelines
The device chooses an authentication domain for each user in the following order:
•
The authentication domain specified for the access module.
•
The ISP domain in the username.
•
The default ISP domain of the device.
If the chosen domain does not exist on the device, the device searches for the ISP domain that
accommodates users assigned to nonexistent domains. If no such ISP domain is configured, user
authentication fails.
NOTE:
Support for the authentication domain configuration depends on the access module.
Examples
# Specify ISP domain test to accommodate users that are assigned to nonexistent domains.
<Sysname> system-view
[Sysname] domain if-unknown test
Related commands
display domain
49