R3303-HP HSR6800 Routers Security Command Reference

23
• radius scheme
authorization-attribute user-profile
Use authorization-attribute user-profile to specify the default authorization user profile for an ISP
domain.
Use undo authorization-attribute user-profile to restore the default.
Syntax
authorization-attribute user-profile profile-name
undo authorization-attribute user-profile
Default
An ISP domain has no default authorization user profile.
Views
ISP domain view
Default command level
3: Manage level
Parameters
profile-name: Name of the user profile, a case-sensitive string of 1 to 31 characters. For more information
about user profile configuration, see Security Configuration Guide.
Usage guidelines
After a user of an ISP domain passes authentication, if the server (or the access device in the case of local
authentication) does not authorize any user profile to the ISP domain, the system uses the user profile
specified by the authorization-attribute user-profile command as that of the ISP domain.
If you configure the authorization-attribute user-profile command multiple times, the most recent
configuration takes effect.
Examples
# Specify the default authorization user profile for domain test as profile1.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization-attribute user-profile profile1
cut connection
Use cut connection to tear down the specified user connections.
Syntax
In standalone mode:
cut connection { access-type { dot1x | mac-authentication | portal } | all | domain isp-name | interface
interface-type interface-number | ip ip-address | mac mac-address | ucibindex ucib-index | user-name
user-name } [ slot slot-number ]
In IRF mode: