HP MSR2000/3000/4000 Router Series Security Command Reference

20
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization ppp local
# Configure ISP domain test to use RADIUS authorization scheme rd for PPP users and use local
authorization as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization ppp radius-scheme rd local
Related commands
• authorization default
• local-user
• radius scheme
authorization-attribute (ISP domain view)
Use authorization-attribute to configure authorization attributes for users in an ISP domain.
Use undo authorization-attribute to restore the default of an authorization attribute.
Syntax
authorization-attribute { idle-cut minute [ flow ] | ip-pool pool-name }
undo authorization-attribute { idle-cut | ip-pool }
Default
No authorization attribute is configured for users in the ISP domain and the idle cut function is disabled.
Views
ISP domain view
Predefined user roles
network-admin
Parameters
idle-cut minute: Sets the idle timeout period in minutes. The value range of the minute argument is 1 to
600.
flow: Specifies the minimum traffic that must be generated in the idle timeout period in bytes, in the range
of 1 to 10240000. The default is 10240 bytes.
ip-pool pool-name: Specifies the IP address pool for PPP users. The pool-name argument is a
case-sensitive string of 1 to 31 characters.
Usage guidelines
With the idle cut function configured, the device periodically detects the traffic of each online user, and
logs out users who do not meet the minimum traffic requirement in the idle timeout period. When the idle
cut function is disabled on the device, the idle cut function of the server takes effect, which requires at
least 10240 bytes to be generated in a configurable idle timeout period.
If an authenticated user is not assigned an IP address from the authentication server, or from the NAS in
local authentication, the device assigns the user authorization attributes specified by the