R3303-HP HSR6800 Routers Security Command Reference

33
If all the domains are unavailable, user authentication fails.
NOTE:
Support for the authentication domain confi
g
uration depends on the access module. You can specify an
authentication domain for 802.1X, portal, or MAC address authentication.
Examples
# Specify the ISP domain test for users with unknown domain names.
<Sysname> system-view
[Sysname] domain if-unknown test
Related commands
domain default enable
idle-cut enable
Use idle-cut enable to enable the idle cut function and set the relevant parameters.
Use undo idle-cut enable to restore the default.
Syntax
idle-cut enable minute [ flow ]
undo idle-cut enable
Default
The function is disabled.
Views
ISP domain view
Default command level
2: System level
Parameters
minute: Idle timeout period, ranging from 1 to 600 minutes.
flow: Minimum traffic during the idle timeout period in bytes. It ranges from 1 to 10240000 and defaults
to 10240.
Usage guidelines
With the idle cut function enabled for a domain, the device checks the traffic of each online user in the
domain at the idle timeout interval, and it logs out any user in the domain whose traffic during the idle
timeout period is less than the specified minimum traffic.
You can also set the idle timeout period on the server to make the server log out users whose traffic during
the idle timeout period is less than 10240 bytes. However, your setting on the server takes effect only
when you disable the idle cut function on the device.
Examples
# Enable the idle cut function and set the idle timeout period to 50 minutes and the traffic threshold to
1024 bytes for ISP domain test.
<Sysname> system-view