Configuring Isp Domain Attributes; Configuring Aaa Authentication Methods For An Isp Domain - 3Com S7906E Configuration Manual

Configuring ISP Domain Attributes

Follow these steps to configure ISP domain attributes:
To do...
Enter system view
Enter ISP domain view
Place the ISP domain to the
state of active or blocked
Specify the maximum number
of active users in the ISP
domain
Configure the idle cut function
Configure the self-service
server localization function
Specify the default authorization
user profile
A self-service RADIUS server, for example, Intelligent Management Center (iMC), is required for the
self-service server localization function to work. With the self-service function, a user can manage and
control his or her accounting information or card number. A server with self-service software is a
self-service server.

Configuring AAA Authentication Methods for an ISP Domain

In AAA, authentication, authorization, and accounting are separate processes. Authentication refers to
the interactive authentication process of username/password/user information during access or service
request. The authentication process neither sends authorization information to a supplicant nor triggers
any accounting.
AAA supports the following authentication methods:
No authentication (none): All users are trusted and no authentication is performed. Generally, this
method is not recommended.
Local authentication (local): Authentication is performed by the NAS, which is configured with the
user information, including the usernames, passwords, and attributes. Local authentication
Use the command...
system-view
domain isp-name
state { active | block }
access-limit enable
max-user-number
idle-cut enable minute
self-service-url enable
url-string
authorization-attribute
user-profile profile-name
1-15
Remarks
—
—
Optional
When created, an ISP domain
is in the active state by default,
and users in the domain can
request network services.
Optional
No limit by default
Optional
Disabled by default
flow
Currently, this command is
effective only for LAN users,
and portal users.
Optional
Disabled by default
Optional
By default, an ISP domain has no
default authorization user profile.