R2511-HP MSR Router Series Security Configuration Guide(V5)
46
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Create an ISP domain and
enter ISP domain view.
domain isp-name N/A
3. Return to system view.
quit N/A
4. Specify the default ISP
domain.
domain default enable
isp-name
Optional.
By default, the default ISP domain is the
system-defined ISP domain system.
5. Specify an ISP domain for
users with unknown domain
names.
domain if-unknown
isp-name
Optional.
By default, no ISP domain is specified for
users with unknown domain names.
To delete the ISP domain that is functioning as the default ISP domain, you must change it to a non-default
ISP domain by using the undo domain default enable command.
Configuring ISP domain attributes
In an ISP domain, you can configure the following attributes:
• Domain status—By placing the ISP domain to the active or blocked state, you allow or deny
network service requests from users in the domain.
• Maximum number of online users—The device controls the number of online users in a domain to
ensure the system performance and service reliability.
• Idle cut—Enables the device to check the traffic of each online user in the domain at the idle timeout
interval, and to log out any user in the domain whose traffic during the idle timeout period is less
than the specified minimum traffic.
• Self-service server location—Allows users to access the self-service server to manage their own
accounts and passwords.
• IP address pool for allocating addresses to PPP users—The device assigns IP addresses from the
pool to PPP users in the domain.
• Default authorization user profile—If a user passes authentication but is authorized with no user
profile, the device authorizes the default user profile of the ISP domain to the user and restricts the
user's behavior based on the profile. For more information about user profiles, see "Configuring
user profiles."
An ISP domain attribute applies to all users in the domain.
A self-service RADIUS server running on IMC is required for the self-service server location function to
work.
To configure ISP domain attributes:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter ISP domain view.
domain isp-name N/A