Configuring ISP domain attributes
In an ISP domain, you can configure the following attributes:
Domain status—By placing the ISP domain in active or blocked state, you allow or deny network service requests from users in the domain.
Authorization attributes—The device assigns the authorization attributes in the ISP domain to the authenticated users who do not receive these attributes from the server. However, if the idle cut attribute is configured in the ISP domain, the device assigns the attribute to the authenticated users. If no idle cut attribute is configured in the ISP domain, the device uses the idle cut attribute assigned by the server. The device supports the following authorization attributes:
Authorization ACL—The device restricts authenticated users to access only the network resources permitted by the ACL. For portal users, the authorization ACL can be configured in a preauthentication domain to authorize access to network resources before users pass authentication.
Authorization CAR action—The attribute controls the traffic flow of authenticated users. For portal users, the authorization CAR action can be configured in a preauthentication domain to control traffic flow before users pass authentication.
Idle cut—It enables the device to check the traffic of each online user at the specified direction in the domain at the idle timeout interval. The device logs out any users in the domain whose total traffic in the idle timeout period at the specified direction is less than the specified minimum traffic.
IPv4 address pool—The device assigns IPv4 addresses from the pool to authenticated users in the domain.
IPv6 address pool—The device assigns IPv6 addresses from the pool to authenticated users in the domain.
Authorization user group—Authenticated users in the domain obtain all attributes of the user group.
An ISP domain attribute applies to all users in the domain.
To configure ISP domain attributes:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter ISP domain view. | domain isp-name | N/A |
3. Place the ISP domain in active or blocked state. | state { active | block } | By default, an ISP domain is in active state, and users in the domain can request network services. |
4. Configure authorization attributes for authenticated users in the ISP domain. | authorization-attribute { acl acl-number | car inbound cir committed-information-rate [ pir peak-information-rate ] outbound cir committed-information-rate [ pir peak-information-rate ] | idle-cut minutes [ flow ] [ traffic { both | inbound | outbound } ] | ip-pool pool-name | ipv6-pool ipv6-pool-name | user-group user-group-name } | The default settings are as follows:
|
5. Specify the user address type in the ISP domain. | user-address-type { ds-lite | ipv6 | nat64 | private-ds | private-ipv4 | public-ds | public-ipv4 } | By default, no user address type is specified. |
6. Specify the service type for users in the ISP domain. | service-type { hsi | stb | voip } | By default, the service type is hsi. |