Operation Manual – AAA
H3C S5600 Series Ethernet Switches
Chapter 2 AAA Configuration
2-3
To do…
Use the command…
Remarks
Set the status of the ISP
domain
state
{
active
|
block
}
Optional
By default, an ISP domain
is in the
active
state, that
is, all the users in the
domain are allowed to
request network service.
Set the maximum number
of access users that the
ISP domain can
accommodate
access-limit
{
disable
|
enable
max-user-number
}
Optional
By default, there is no limit
on the number of access
users that the ISP domain
can accommodate.
Set the idle-cut function
idle-cut
{
disable
|
enable
minute flow
}
Optional
By default, the idle-cut
function is disabled.
Set the
accounting-optional
switch
accounting
optional
Optional
By default, the
accounting-optional
switch is off.
Set the messenger
function
messenger
time
{
enable
limit interval
|
disable
}
Optional
By default, the messenger
function is disabled.
Set the self-service server
location function
self-service-url
{
disable
|
enable
url-string
}
Optional
By default, the
self-service server
location function is
disabled.
Note that:
z
On an S5600 series switch, each access user belongs to an ISP domain. You can
configure up to 16 ISP domains on the switch. When a user logs in, if no ISP
domain name is carried in the username, the switch assumes that the user
belongs to the default ISP domain.
z
If you have configured to use "." as the delimiter, for a username that contains
multiple ".", the first "." will be used as the domain delimiter.
z
If you have configured to use "@" as the delimiter, the "@" must not appear more
than once in the username. If “.” is the delimiter, the username must not contain
any “@”.
z
If the system does not find any available accounting server or fails to communicate
with any accounting server when it performs accounting for a user, it does not
disconnect the user as long as the accounting optional command has been
executed, though it cannot perform accounting for the user in this case.
