H3C SR8800-F Configuration Manual page 73

Step
3. Configure authorization
attributes for authenticated
users in the ISP domain.
Including the idle timeout period in the user online duration to be sent to the server
If a user goes offline due to connection failure or malfunction, the user's online duration sent to the
server includes the idle timeout period. The online duration that is generated on the server is longer
than the actual online duration of the user.
Typically, the idle timeout period is authorized by the authorization server after users pass
authentication. For portal users, the idle timeout period set for the online portal user detection feature
takes priority over the server-assigned idle timeout period. For more information about online
detection for portal users, see
To include the idle timeout period in the user online duration to be sent to the server:
Step
1. Enter system view.
2. Enter ISP domain view.
3. Configure
include
period in the user online
duration to be sent to the
server.
Specifying the user address type in an ISP domain
Step
1. Enter system view.
2. Enter ISP domain view.
Command
authorization-attribute { acl
acl-number | car inbound cir
committed-information-rate [ pir
peak-information-rate ] outbound
cir committed-information-rate
[ pir peak-information-rate ] |
idle-cut minutes [ flow ] [ traffic
{ both | inbound | outbound } ] |
igmp max-access-number
max-access-number | ip-pool
pool-name | ipv6-pool
ipv6-pool-name | ipv6-prefix
ipv6-prefix prefix-length | mld
max-access-number
max-access-number |
{ primary-dns | secondary-dns }
{ ip ipv4-address | ipv6
ipv6-address } |
session-group-profile
session-group-profile-name |
session-timeout timeout | url
url-string | user-group
user-group-name | user-priority
{ inbound | outbound } priority |
user-profile profile-name |
vpn-instance
vpn-instance-name }
"Configuring portal
Command
system-view
domain isp-name
the device to
the idle timeout
session-time include-idle-time
Command
system-view
domain isp-name
authentication."
57
Remarks
The default settings are as follows:
•
The idle cut feature
disabled.
•
An IPv4 user can concurrently
join a maximum of four IGMP
multicast groups.
•
An IPv6 user can concurrently
join a maximum of four MLD
multicast groups.
•
No other authorization
attributes exist.
The user-priority attribute takes
effect only on SPEX cards
(excluding the CSPEX-1204 card).
For IPoE, portal, and PPP users
that access the network through
Layer 3 aggregate interfaces or
Layer 3 aggregate subinterfaces,
you can apply the authorization
user priority only to upstream
packets of users.
The user-profile attribute takes
effect only on CSPEX cards.
The session-group-profile
attribute does not take effect.
Remarks
N/A
N/A
By default, the user online
duration sent to the server
excludes the idle timeout period.
Remarks
N/A
N/A
is