R3721-F3210-F3171-HP High-End Firewalls Access Control Command Reference-6PW101

Parameters

profile-name: Name of the user profile, a case-sensitive string of 1 to 31 characters.

Description

Use authorization-attribute user-profile to specify the default authorization user profile for an ISP

domain.

Use undo authorization-attribute user-profile to restore the default.

By default, an ISP domain has no default authorization user profile.

After a user of an ISP domain passes authentication, if the server (or the firewall in the case of local

authentication) does not authorize any user profile to the ISP domain, the system uses the user profile

specified by the authorization-attribute user-profile command as that of the ISP domain.

If you configure the authorization-attribute user-profile command repeatedly, only the last one takes

effect.

Examples

# Specify the default authorization user profile for domain test as profile1.

<Sysname> system-view

[Sysname] domain test

[Sysname-isp-test] authorization-attribute user-profile profile1

cut connection

Syntax

cut connection { access-type portal | all | domain isp-name | interface interface-type interface-number

| ip ip-address | mac mac-address | ucibindex ucib-index | user-name user-name | vlan vlan-id }

View

System view

Default level

2: System level

Parameters

access-type: Specifies the user connections of the specified access type.

portal: Indicates portal authentication.

all: Specifies all user connections.

domain isp-name: Specifies the user connections of an ISP domain. The isp-name argument refers to the

name of an existing ISP domain and is a string of 1 to 24 characters.

interface interface-type interface-number: Specifies the user connections on an interface. Only Layer 2

Ethernet interfaces are supported.

ip ip-address: Specifies the user connections for an IP address.

mac mac-address: Specifies the user connections for a MAC address, with mac-address in the format

H-H-H.

ucibindex ucib-index: Specifies the user connection that uses the connection index. The value range is

from 0 to 4294967295.