R2511-HP MSR Router Series Security Command Reference(V5)

38
NOTE:
Support for the authentication domain confi
g
uration depends on the access module. You can specify an
authentication domain for 802.1X, portal, or MAC address authentication.
Examples
# Specify the ISP domain test for users with unknown domain names.
<Sysname> system-view
[Sysname] domain if-unknown test
Related commands
domain default enable
idle-cut enable
Use idle-cut enable to enable the idle cut function and set the relevant parameters.
Use undo idle-cut enable to restore the default.
Syntax
idle-cut enable minute [ flow ]
undo idle-cut enable
Default
The function is disabled.
Views
ISP domain view
Default command level
2: System level
Parameters
minute: Specifies the idle timeout period in the range of 1 to 600 minutes.
flow: Specifies the minimum traffic during the idle timeout period in bytes. The value range is 1 to
10240000, and the default is 10240.
Usage guidelines
With the idle cut function enabled for a domain, the device checks the traffic of each online user in the
domain at the idle timeout interval, and it logs out any user in the domain whose traffic during the idle
timeout period is less than the specified minimum traffic.
You can also set the idle timeout period on the server to make the server log out users whose traffic during
the idle timeout period is less than 10240 bytes. However, your setting on the server takes effect only
when you disable the idle cut function on the device.
Examples
# Enable the idle cut function and set the idle timeout period to 50 minutes and the traffic threshold to
1024 bytes for ISP domain test.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] idle-cut enable 50 1024