31
Usage guidelines
The device chooses an authentication domain for each user in the following order:
•
The authentication domain specified for the access module
•
The ISP domain in the username
•
The default ISP domain of the device
•
The ISP domain specified for users with unknown domain names
If all the domains are unavailable, user authentication fails.
NOTE:
Support for the authentication domain configuration depends on the access module. You can
specify an authentication domain for 802.1X, portal, or MAC address authentication.
Examples
# Specify the ISP domain
test
for users with unknown domain names.
<Sysname> system-view
[Sysname] domain if-unknown test
Related commands
domain default enable
idle-cut enable
Use
idle-cut enable
to enable the idle cut function and set the relevant parameters.
Use
undo
idle-cut enable
to restore the default.
Syntax
idle-cut
enable
minute
[
flow
]
undo
idle-cut enable
Default
The function is disabled.
Views
ISP domain view
Default command level
2: System level
Parameters
minute
: Idle timeout period, ranging from 1 to 600 minutes.
flow
: Minimum traffic during the idle timeout period in bytes. It ranges from 1 to 10240000 and
defaults to 10240.
Usage guidelines
With the idle cut function enabled for a domain, the device checks the traffic of each online user in
the domain at the idle timeout interval, and it logs out any user in the domain whose traffic during the
idle timeout period is less than the specified minimum traffic.
You can also set the idle timeout period on the server to make the server log out users whose traffic
during the idle timeout period is less than 10240 bytes. However, your setting on the server takes
effect only when you disable the idle cut function on the device.
