H3C IE4300 Command Reference Manual page 1805

Parameters
acl acl-number
argument is 2000 to 4999. This option is applicable only to portal and LAN users. The device
processes the traffic that matches the rules in the authorization ACL based on the permit or deny
statement in the rules.
: Specifies a CAR action for users. Typically, the attribute applies to authenticated users. If you
car
configure the attribute in a portal preauthentication domain, the CAR action applies before portal
authentication. This keyword is applicable only to portal users.
: Specifies the upload rate of users.
inbound
outbound
cir committed-information-rate
range of 1 to 4194303.
pir peak-information-rate
4194303. The peak information rate cannot be smaller than the committed information rate. If you do
not specify this option, the CAR action does not restrict users by peak information rate.
igmp max-access-number max-access-number
groups that an IPv4 user can join concurrently. The value range for the
argument is 1 to 64. This option is applicable only to portal users.
ip-pool ipv4-pool-name
argument is a case-insensitive string of 1 to 63 characters. This option is applicable only to portal
users.
ipv6-pool
ipv6-pool-name
applicable only to portal users.
mld max-access-number max-access-number
groups that an IPv6 user can join concurrently. The value range for the
argument is 1 to 64. This option is applicable only to portal users.
url url-string
they access the network after they pass authentication. The
case-sensitive string of 1 to 255 characters. This option is applicable only to LAN users.
user-group user-group-name
argument is a case-insensitive string of 1 to 32 characters. Authenticated users obtain all attributes
of the user group.
user-profile profile-name
argument is a case-sensitive string of 1 to 31 characters. Typically, the attribute applies to
authenticated users. If you configure the attribute in a portal preauthentication domain, the user
profile applies before portal authentication. This option is applicable only to portal and LAN users.
Usage guidelines
If the server or NAS does not authorize a type of attribute to an authenticated user, the device
authorizes the attribute in the ISP domain to the user.
You can configure multiple authorization attributes for users in an ISP domain. If you execute the
command multiple times with the same attribute specified, the most recent configuration takes effect.
When you specify an authorized ACL, follow these restrictions and guidelines:
•
If the specified ACL does not exist or the ACL does not contain any rules, the system considers
that no ACL is specified. If the strict check method is enabled for portal authorized ACLs, the
system logs off portal users.
: Specifies an ACL to filter traffic for users. The value range for the
: Specifies the download rate of users.
: Specifies an IPv4 address pool for users. The
ipv6-pool-name
argument is a case-insensitive string of 1 to 63 characters. This option is
: Specifies a redirect URL for users. Users are redirected to the URL the first time
: Specifies the committed information rate in kbps, in the
: Specifies the peak information rate in kbps, in the range of 1 to
: Specifies an IPv6
: Specifies the maximum number of MLD
: Specifies a user group for users. The
: Specifies an authorization user profile. The
24
: Specifies the maximum number of IGMP
max-access-number
address pool
max-access-number
url-string
user-group-name
acl-number
ipv4-pool-name
for users. The
argument is a
profile-name