R3303-HP HSR6800 Routers Security Configuration Guide

46
• Maximum number of online users—The device controls the number of online users in a domain to
ensure the system performance and service reliability.
• Idle cut—Enables the device to check the traffic of each online user in the domain at the idle timeout
interval, and to log out any user in the domain whose traffic during the idle timeout period is less
than the specified minimum traffic.
• Self-service server location—Allows users to access the self-service server to manage their own
accounts and passwords.
• IP address pool for allocating addresses to PPP users—The device assigns IP addresses from the
pool to PPP users in the domain.
• Default authorization user profile—If a user passes authentication but is authorized with no user
profile, the device authorizes the default user profile of the ISP domain to the user and restricts the
user's behavior based on the profile. For more information about user profiles, see "Configuring
user profiles."
An ISP domain attribute applies to all users in the domain.
A self-service RADIUS server running on IMC is required for the self-service server location function to
work.
To configure ISP domain attributes:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter ISP domain view.
domain isp-name N/A
3. Place the ISP domain to the
active or blocked state.
state { active | block }
Optional.
By default, an ISP domain is in active
state, and users in the domain can
request network services.
4. Specify the maximum
number of online users in the
ISP domain.
access-limit enable
max-user-number
Optional.
No limit is specified by default.
5. Configure the idle cut
function.
idle-cut enable minute [ flow ]
Optional.
Disabled by default.
This command is effective only for
LAN, portal, and PPP users.
6. Enable the self-service server
location function and specify
the URL of the self-service
server.
self-service-url enable url-string
Optional.
Disabled by default.
7. Define an IP address pool
for allocating addresses to
PPP users.
ip pool pool-number
low-ip-address [ high-ip-address ]
Optional.
By default, no IP address pool is
configured for PPP users.
8. Specify the default
authorization user profile.
authorization-attribute
user-profile profile-name
Optional.
By default, an ISP domain has no
default authorization user profile.