R2511-HP MSR Router Series Security Command Reference(V5)

30
authorization-attribute user-profile
Use authorization-attribute user-profile to specify the default authorization user profile for an ISP
domain.
Use undo authorization-attribute user-profile to restore the default.
Syntax
authorization-attribute user-profile profile-name
undo authorization-attribute user-profile
Default
An ISP domain has no default authorization user profile.
Views
ISP domain view
Default command level
3: Manage level
Parameters
profile-name: Specifies the name of the user profile, a case -sensitive string of 1 to 31 characters. For more
information about user profile configuration, see Security Configuration Guide.
Usage guidelines
After a user of an ISP domain passes authentication, if the server (or the access device in the case of local
authentication) does not authorize any user profile to the ISP domain, the system uses the user profile
specified by the authorization-attribute user-profile command as that of the ISP domain.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Specify the default authorization user profile for domain test as profile1.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization-attribute user-profile profile1
cut connection
Use cut connection to tear down the specified user connections forcibly.
Syntax
cut connection { access-type { dot1x | mac-authentication | portal } | all | domain isp-name | interface
interface-type interface-number | ip ip-address | mac mac-address | ucibindex ucib-index | user-name
user-name | vlan vlan-id }
Views
System view
Default command level
2: System level