Creating/Deleting An Isp Domain; Configuring Relevant Attributes Of The Isp Domain - 3Com Switch 4500 26-Port Configuration Manual

204 C 11: 802.1X C
HAPTER
Creating/Deleting an ISP
Domain
Configuring Relevant
Attributes of the ISP
Domain
ONFIGURATION
Disconnecting a user by force
■
Among the above configuration tasks, creating ISP domain is compulsory,
otherwise the user attributes cannot be distinguished. The other tasks are
optional. You can configure them at requirements.
What is Internet Service Provider (ISP) domain? To make it simple, ISP domain is a
group of users belonging to the same ISP. Generally, for a username in the
userid@isp-name format, taking gw20010608@3com163.net as an example, the
isp-name (that is, 3com163.net) following the @ is the ISP domain name. When
the Switch 4500 controls user access, as for an ISP user whose username is in
userid@isp-name format, the system will take userid part as username for
identification and take isp-name part as domain name.
The purpose of introducing ISP domain settings is to support the multi-ISP
application environment. In such an environment, one access device might access
users of different ISP. Because the attributes of ISP users, such as username and
password formats, and so on, may be different, it is necessary to differentiate
them through setting ISP domain. In the Switch 4500 units, ISP domain view, you
can configure a complete set of exclusive ISP domain attributes on a per-ISP
domain basis, which includes AAA policy ( RADIUS scheme applied etc.)
For the Switch 4500, each user belongs to an ISP domain. Up to 16 domains can
be configured in the system. If a user has not reported their ISP domain name, the
system will put them into the default domain.
Perform the following configurations in System View.
Table 208 Creating/Deleting an ISP Domain
Operation
Create ISP domain or enter the view
of a specified domain.
Remove a specified ISP domain
Enable the default ISP domain
specified by isp-name
Restore the default ISP domain to
"system"
By default, a domain named "system" has been created in the system. Its
attributes are all default values.
The relevant attributes of ISP domain include the AAA scheme, domain state,
maximum number of users, the idle-cut function, the accounting optional option,
the messenger alert and self-service server URL.
Perform the following configurations in ISP Domain View.
Configuring AAA Scheme
The AAA schemes includes:
RADIUS scheme — you can implement authentication, authorization, and
■
accounting by referencing the RADIUS server group. The adopted RADIUS
scheme is the one used by all the users in the ISP domain. For detailed
Command
domain isp_name
undo domain isp_name
domain default enable isp_name
domain default disable