3Com Switch 8800 Family Firewall Module Configuration and Command Reference Guide

34 CHAPTER 4: AAA AND RADIUS/HWTACACS PROTOCOL CONFIGURATION
By default, an ISP domain is active when it is created.
Setting an access limit
You can specify the maximum number of users that an ISP domain can
accommodate by setting an access limit.
Perform the following configuration in ISP domain view.
By default, an ISP domain has no limit on the user number upon its creation.
Enabling accounting optional
If a user is configured with accounting optional, the device does not disconnect
the user during the accounting even when it finds no available accounting server
or fails to communicate with the accounting server.
Unlike the scheme none command, with the accounting optional command,
the system sends accounting information to the accounting server but does not
terminate the connection regardless of whether the accounting server responds or
performs the accounting service. However, with the scheme none command, the
system neither sends accounting information to the accounting server nor
terminates the connection. If you specify RADIUS or HWTACACS in the scheme
command without configuring accounting optional, the system sends
accounting information to the accounting server and if the server does not
respond or perform accounting service terminates the connection.
Perform the following configuration in ISP domain view.
By default, when an ISP domain is created, accounting optional is disabled.
Defining an address pool and allocating IP addresses to PPP users
PPP users can obtain IP addresses from the device through PPP address
negotiation. Three approaches are available for address allocation on an interface:
■ Directly allocate IP addresses on the interface without configuring an address
pool.
■ Define an address pool in system view and assign it (only one is allowed) to the
interface in the view of this interface for assigning addresses to the connected
ends.
■ Define address pools in domain view and directly allocate the addresses from
the pools to the login domain PPP users.
Tabl e 17 Configure an access limit
Operation Command
Set an access limit to limit the number of users
that the domain can accommodate.
access-limit { disable | enable
max-user-number }
Restore the default value. undo access-limit
Tabl e 18 Enable/disable accounting optional
Operation Command
Enable accounting optional. accounting optional
Disable accounting optional. undo accounting optional