Configuring ISP domain attributes
In an ISP domain, you can configure the following attributes:
Domain status—By placing the ISP domain to the active or blocked state, you allow or deny network service requests from users in the domain.
Maximum number of online users—The switch controls the number of online users in a domain to ensure the system performance and service reliability.
Idle cut—This function enables the switch to check the traffic of each online user in the domain at the idle timeout interval, and to log out any user in the domain whose traffic during the idle timeout period is less than the specified minimum traffic.
Self-service server location—By using the information defined in this attribute, users can access the self-service server to manage their own accounts and passwords. A self-service RADIUS server, such as IMC, is required for the self-service server location function to work.
Default authorization user profile—If a user passes authentication but is authorized with no user profile, the switch authorizes the default user profile of the ISP domain to the user and restricts the user's behavior based on the profile. For more information about user profiles, see "Configuring a user profile."
DSCP value—The switch sets the specified DSCP value in IP packets from authenticated users in the ISP domain, which is identified in the login username userid@domain-name. Policy-based routing routes IP packets to different destinations based on the DSCP value. This attribute applies only to ISP domains that use the same scheme for Layer 3 portal authentication. For more information about policy-based routing, see Layer 3—IP Routing Configuration Guide. For more information about Layer 3 portal authentication, see "Configuring portal authentication."
To configure ISP domain attributes:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter ISP domain view. | domain isp-name | N/A |
3. Place the ISP domain to the state of active or blocked. | state { active | block } | Optional. By default, an ISP domain is in active state, and users in the domain can request network services. |
4. Specify the maximum number of online users in the ISP domain. | access-limit enable max-user-number | Optional. No limit by default. |
5. Configure the idle cut function. | idle-cut enable minute [ flow ] | Optional. Disabled by default. This command is effective for only LAN users and portal users. |
6. Enable the self-service server location function and specify the URL of the self-service server. | self-service-url enable url-string | Optional. Disabled by default. |
7. Specify the default authorization user profile. | authorization-attribute user-profile profile-name | Optional. By default, an ISP domain has no default authorization user profile. |
8. Set a DSCP value for the ISP domain. | dscp dscp-value | Optional. By default, no DSCP value is specified for an ISP domain. |