R3721-F3210-F3171-HP High-End Firewalls Access Control Command Reference-6PW101

98
View
System view
Default level
3: Manage level
Parameters
isp-name: Name of the ISP domain, a case-insensitive string of 1 to 24 characters.
Description
Use domain default enable to specify the default ISP domain. Users without any domain name carried in
the usernames are considered to be in the default domain.
Use undo domain default enable to restore the default.
By default, the default ISP domain is the system predefined ISP domain system.
There can be only one default ISP domain.
The specified domain must already exist. Otherwise, users without any domain name carried in the
username cannot pass authentication.
To delete the ISP domain that is used as the default ISP domain, you must change it to a non-default ISP
domain first by using the domain default disable command.
Related commands: domain, state, and display domain.
Examples
# Create a new ISP domain named test, and configure it as the default ISP domain.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] quit
[Sysname] domain default enable test
idle-cut enable
Syntax
idle-cut enable minute [ flow ]
undo idle-cut enable
View
ISP domain view
Default level
2: System level
Parameters
minute: Idle timeout period, in the range of 1 to 600 minutes.
flow: Minimum traffic during the idle timeout period, which ranges from 1 to 10240000 bytes and
defaults to 10240.
Description
Use idle-cut enable to enable the idle cut function and set the relevant parameters. With the idle cut
function enabled for a domain, the firewall checks the traffic of each online user in the domain at the idle