R3303-HP HSR6800 Routers Security Command Reference

32
Usage guidelines
There can be only one default ISP domain.
The specified domain must already exist. Otherwise, users without a domain name in the username
cannot pass authentication.
To delete the ISP domain that is used as the default ISP domain, you must first change it to a non-default
ISP domain by using the undo domain default enable command.
Examples
# Create a new ISP domain named test, and configure it as the default ISP domain.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] quit
[Sysname] domain default enable test
Related commands
• domain
• state
• display domain
domain if-unknown
Use domain if-unknown to specify an ISP domain for users with unknown domain names.
Use undo domain if-unknown to restore the default.
Syntax
domain if-unknown isp-name
undo domain if-unknown
Default
No ISP domain is specified for users with unknown domain names.
Views
System view
Default command level
3: Manage level
Parameters
isp-name: Specifies an ISP domain name, a case-insensitive string of 1 to 24 characters that cannot
contain the slash (/), backslash (\), colon (:), asterisk (*), question mark (?), left angle bracket (<), right
angle bracket (>), quotation marks ("), and at sign (@).
Usage guidelines
The device chooses an authentication domain for each user in the following order:
• The authentication domain specified for the access module
• The ISP domain in the username
• The default ISP domain of the device
• The ISP domain specified for users with unknown domain names