Configuring Isp Domain Attributes; Configuring An Aaa Authentication Scheme For An Isp Domain - 3Com MSR 50 Series Configuration Manual

1762 C 93: AAA/RADIUS/HWTACACS C
HAPTER
n
Configuring ISP Domain
Attributes
n
Configuring an AAA
Authentication Scheme
for an ISP Domain
ONFIGURATION
Follow these steps to create an ISP domain:
To do...
Enter system view
Create an ISP domain and
enter ISP domain view
Return to system view
Specify the default ISP domain domain default { disable
You cannot delete the default ISP domain unless you change it to a non-default
■
ISP domain (with the domain default disable command) first.
If a user enters a username without an ISP domain name, the device uses the
■
authentication scheme for the default ISP domain to authenticate the user.
Follow these steps to configure ISP domain attributes:
To do...
Enter system view
Create an ISP domain and
enter ISP domain view
Place the ISP domain to the
state of active or blocked
Specify the maximum number
of accessing users in the ISP
domain
Configure the idle cut
function
Enable the self-service server
localization function and
specify the URL of the
self-service server for
changing user password
Define an IP address pool for
allocating addresses to PPP
users
A self-service RADIUS server, for example, CAMS, is required for the self-service
server localization function. With the self-service function, a user can manage and
control his or her accounting information or card number. A server with
self-service software is a self-service server.
In AAA, authentication, authorization, and accounting are three separate
processes. Authentication refers to the interactive authentication process of
username/password/user information during access or service request. The
Use the command...
system-view
domain isp-name
quit
| enable isp-name }
Use the command...
system-view
domain isp-name
state { active | block }
access-limit { disable |
enable max-user-number }
idle-cut { disable | enable
minute }
self-service-url { disable |
enable url-string }
ip pool pool-number
low-ip-address
[ high-ip-address ]
Remarks
-
Required
-
Optional
The system-default ISP domain
named system by default
Remarks
-
Required
Optional
When created, an ISP is in the
state of active by default, and
users in the domain can
request network services.
Optional
No limit by default
Optional
Disabled by default
Optional
Disabled by default
Optional
No IP address pool is
configured for PPP users by
default.