H3C S6812 Series Command Reference Manual page 1665

car: Specifies a CAR action for users. Typically, the attribute applies to authenticated users. If you
configure the attribute in a portal preauthentication domain, the CAR action applies before portal
authentication. This keyword is applicable only to portal users.
inbound: Specifies the upload rate of users.
outbound: Specifies the download rate of users.
cir committed-information-rate: Specifies the committed information rate in kbps, in the range of 1 to
4194303.
pir peak-information-rate: Specifies the peak information rate in kbps, in the range of 1 to 4194303.
If you do not specify this option, the CAR action does not restrict users by peak information rate.
igmp max-access-number max-access-number: Specifies the maximum number of IGMP groups
that an IPv4 user can join concurrently. The value range for the max-access-number argument is 1 to
64. This option is applicable only to portal users.
ip-pool pool-name: Specifies an IPv4 address pool for users. The pool-name argument is a
case-insensitive string of 1 to 63 characters. This option is applicable only to portal users.
ipv6-pool ipv6-pool-name: Specifies an IPv6 address pool for users. The ipv6-pool-name argument
is a case-insensitive string of 1 to 63 characters. This option is applicable only to portal users.
mld max-access-number max-access-number: Specifies the maximum number of MLD groups
that an IPv6 user can join concurrently. The value range for the max-access-number argument is 1 to
64. This option is applicable only to portal users.
url url-string: Specifies the URL to which users are redirected after they pass authentication. The
url-string argument is a case-sensitive string of 1 to 255 characters. This option is applicable only to
LAN users.
user-group user-group-name: Specifies a user group for users. The user-group-name argument is a
case-insensitive string of 1 to 32 characters. Authenticated users obtain all attributes of the user
group.
user-profile profile-name: Specifies an authorization user profile. The profile-name argument is a
case-sensitive string of 1 to 31 characters. Typically, the attribute applies to authenticated users. If
you configure the attribute in a portal preauthentication domain, the user profile applies before portal
authentication. This option is applicable only to LAN and portal users.
Usage guidelines
If the server or NAS does not authorize any attributes to an authenticated user, the device authorizes
the attributes in the ISP domain to the user.
You can configure multiple authorization attributes for users in an ISP domain. If you execute the
command multiple times with the same attribute specified, the most recent configuration takes effect.
Examples
# Specify user group abc as the authorization user group for users in ISP domain test.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization-attribute user-group abc
Related commands
display domain
display domain
Use display domain to display ISP domain configuration.
Syntax
display domain [ isp-name ]
24