3Com 7700 Configuration Manual page 196

188 C 9: AAA
HAPTER AND
RADIUS O
PERATION
For the Switch 7700, each supplicant belongs to an ISP domain. Up to 16 domains
can be configured in the system. If a user has not reported its ISP domain name,
the system will put it into the default domain.
Perform the following configurations in system view.
Table 12 Create/Delete ISP Domain
Operation
Create ISP domain or enter the
view of a specified domain.
Remove a specified ISP domain undo domain isp-name
By default, there is no ISP domain in the system.
Configuring Relevant Attributes of an ISP Domain
The relevant attributes of ISP domain include the adopted RADIUS server group,
state, and maximum number of supplicants. Where,
The adopted RADIUS server group is the one used by all the users in the ISP
■
domain. The RADIUS server group can be used for RADIUS authentication or
accounting. By default, the default RADIUS server group is used. The command
is used together with the commands of setting RADIUS server and server
cluster. For details, refer to "Configuring the RADIUS Protocol ".
Every ISP has active/block states. If an ISP domain is in active state, the users in
■
it can request for network service, while in block state, its users cannot request
for any network service. An ISP is in the block state when it is created. No user
in the domain is allowed to request for network service.
Maximum number of supplicants specifies how many supplicants can be
■
contained in the ISP. For any ISP domain, there is no limit to the number of
supplicants by default.
The idle cut function means: If the traffic from a certain connection is lower
■
than the defined traffic, cut off this connection.
Perform the following configurations in ISP domain view.
Table 13 Configure Relevant Attributes of ISP Domain
Operation
Specify the adopted RADIUS
server group
Specify the ISP domain state to
be used
Set a limit to the amount of
supplicants
Set the idle
By default, after an ISP domain is created, the used RADIUS server group is the
default named "default" (for relevant parameter configuration, refer to
"Configuring the RADIUS Protocol "), the state of domain is active, there is no
limit to the amount of supplicants and disable the idle-cut.
Command
domain [isp-name | default {disable | enable isp-name}]
Command
radius-scheme radius-scheme-name
state {active | block}
access-limit {disable | enable max-user-number}
idle-cut {disable | enable minute flow}