R0106-HP MSR Router Series Security Configuration Guide(V7)

45
Ste
p
Command Remarks
3. Return to system view.
quit N/A
4. (Optional.) Specify the default
ISP domain.
domain default enable
isp-name
By default, the default ISP domain is the
system-defined ISP domain system.
5. (Optional.) Specify the ISP
domain used by users that
include unknown domain
names.
domain if-unknown
isp-domain-name
By default, no ISP domain is specified for
users that include unknown domain
names.
Configuring ISP domain attributes
In an ISP domain, you can configure the following attributes:
• Domain status—By placing the ISP domain in active or blocked state, you allow or deny network
service requests from users in the domain.
• Maximum number of online users—The device controls the number of online users in a domain to
ensure the system performance and service reliability.
• Authorization attributes—The device assigns the IP address pool attribute in the ISP domain to the
authenticated users who do not receive the attribute from the server. If the idle cut attribute is
configured in the ISP domain, the device assigns the attribute to the authenticated users. If no idle
cut attribute is configured in the ISP domain, the device uses the idle cut attribute assigned by the
server. The device supports the following authorization attributes:
{ Idle cut—It enables the device to check the traffic of each online user in the domain at the idle
timeout interval. The device logs out any users in the domain whose total traffic in the idle
timeout period is less than the specified minimum traffic.
{ IP address pool for PPP users—The device assigns IP addresses from the pool to authenticated
PPP users in the domain.
• User online duration including idle cut period—If a user goes offline due to connection failure or
malfunction, its online duration sent to the server includes the idle cut period or user online detection
period. The online duration that is generated on the server is longer than the actual online duration
of the user. The user online detection period is supported only by portal authentication.
An ISP domain attribute applies to all users in the domain.
To configure ISP domain attributes:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter ISP domain view.
domain isp-name N/A
3. Place the ISP domain in active
or blocked state.
state { active | block }
By default, an ISP domain is in
active state, and users in the
domain can request network
services.
4. Specify the maximum number
of online users in the ISP
domain.
access-limit enable
max-user-number
By default, there is no limit to the
maximum number of online users.