Configuring ISP domain attributes
In an ISP domain, you can configure the following attributes:
Domain status—By placing the ISP domain to the active or blocked state, you allow or deny network service requests from users in the domain.
Maximum number of online users—The device controls the number of online users in a domain to ensure the system performance and service reliability.
Idle cut—This function enables the device to log out any users whose idle periods exceed the idle timeout period.
The idle cut function configured in ISP domain view takes precedence over the idle cut function configured in local user view and user group view.
Self-service server location—By using the information defined in this attribute, users can access the self-service server to manage their own accounts and passwords.
Default authorization user profile—If a user passes authentication but is authorized with no user profile, the device authorizes the default user profile of the ISP domain to the user and restricts the user's behavior based on the profile.
DSCP value—The switch sets the specified DSCP value in IP packets from authenticated users in the ISP domain, which is identified in the login username userid@domain-name. Policy-based routing routes IP packets to different destinations based on the DSCP value. This attribute only applies to ISP domains that use the same scheme for Layer 3 portal authentication. For more information about policy-based routing, see Layer 3—IP Routing Configuration Guide. For more information about Layer 3 portal authentication, see "Configuring portal authentication."
An ISP domain attribute applies to all users in the domain.
To configure ISP domain attributes:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter ISP domain view. | domain isp-name | N/A |
3. Place the ISP domain to the active or blocked state. | state { active | block } | Optional. By default, an ISP domain is in active state, and users in the domain can request network services. |
4. Specify the maximum number of online users in the ISP domain. | access-limit enable max-user-number | Optional. No limit by default. |
5. Configure the idle cut function. | idle-cut enable minute | Optional. Disabled by default. This command is effective only for LAN users. |
6. Enable the self-service server location function and specify the URL of the self-service server. | self-service-url enable url-string | Optional. Disabled by default. |
7. Specify the default authorization user profile. | authorization-attribute user-profile profile-name | Optional. By default, an ISP domain has no default authorization user profile. |
8. Set a DSCP value for the ISP domain. | dscp dscp-value | Optional. By default, no DSCP value is specified for an ISP domain. |
For more information about user profiles, see "Configuring a user profile."
A self-service RADIUS server, such as that running on IMC, is required for the self-service server location function to work.