H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-14
z RADIUS scheme (radius-scheme): You can reference a configured RADIUS
scheme to implement AAA services. For the configuration of RADIUS scheme,
refer to
RADIUS Configuration.
z HWTACACS scheme (hwtacacs-scheme): You can reference a configured
HWTACACS scheme to implement AAA services. For the configuration of
HWTACACS scheme, refer to
HWTACACS Configuration.
1.3.2 Creating an ISP Domain
Table 1-5 Create an ISP domain
To do... Use the command... Remarks
Enter system view
system-view
—
Create an ISP domain,
enter the view of an
existing ISP domain, or
configure the default ISP
domain
domain { isp-name |
default { disable | enable
isp-name } }
Required
The default ISP domain is
system.
1.3.3 Configuring the Attributes of an ISP Domain
Table 1-6 Configure the attributes of an ISP domain
To do... Use the command... Remarks
Enter system view
system-view
—
Create an ISP domain or
enter the view of an
existing ISP domain
domain isp-name
Required
Activate/deactivate the
ISP domain
state { active | block }
Optional
By default, once an ISP
domain is created, it is in
the active state and all
the users in this domain
are allowed to access the
network.
Set the maximum number
of access users that can
be contained in the ISP
domain
access-limit { disable |
enable
max-user-number }
Optional
After an ISP domain is
created, the number of
access users it can
contain is unlimited by
default.
Set the user idle-cut
function
idle-cut { disable |
enable minute flow }
Optional
By default, user idle-cut
function is disabled.