Specifying a Web authentication domain

You can specify different authentication domains for Web authentication users on different interfaces. After you specify a Web authentication domain on an interface, the device uses the authentication domain for AAA of all Web authentication users on the interface, ignoring the domain names carried in the usernames.

The device selects the authentication domain for a Web authentication user on an interface in this order:

1. The authentication domain specified for the interface.

2. The authentication domain carried in the username.

3. The system default authentication domain.

4. The ISP domain configured to accommodate users assigned to nonexistent domains.

If the selected domain does not exist on the device, user authentication fails. For information about ISP domains, see "Configuring AAA."

1. Enter system view.

   system-view

2. Enter interface view.

   interface interface-type interface-number

3. Specify an authentication domain for Web authentication users on the interface.

   web-auth domain domain-name

   By default, no authentication domain is specified for Web authentication users.