4000 Router Series Security Command Reference

authorization-attribute command in the ISP domain. For information about IP address allocation for PPP

users, see Layer 2—WAN Access Configuration Guide.

You can configure multiple authorization attributes for users in an ISP domain. If you execute the

command multiple times with the same keyword specified, the most recent configuration takes effect.

Examples

# Configure the idle cut function for users in the ISP domain named test, which requires users to generate

at least 10240 bytes in an idle timeout period of 30 minutes.

<Sysname> system-view

[Sysname] domain test

[Sysname-isp-test] authorization-attribute idle-cut 30 10240

Related commands

display domain

Use display domain to display the ISP domain configuration.

Syntax

display domain [ isp-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

isp-name: ISP domain name, a case-insensitive string of 1 to 24 characters.

Usage guidelines

If no ISP domain is specified, the command displays the configuration of all ISP domains.

Examples

# Display the configuration of all ISP domains.

<Sysname> display domain

Total 2 domain(s)

Domain:system

State: Active

Access-limit: Disable

Access-Count: 0

default Authentication Scheme: local

default Authorization Scheme: local

default Accounting Scheme: local

Authorization attributes :

Idle-cut : Disable