57
Step Command
Remarks
3.
Configure authorization
attributes for authenticated
users in the ISP domain.
authorization-attribute
{
acl
acl-number
|
car inbound cir
committed-information-rate
[
pir
peak-information-rate
]
outbound
cir
committed-information-rate
[
pir
peak-information-rate
] |
idle-cut minutes
[
flow
] [
traffic
{
both
|
inbound
|
outbound
} ] |
igmp max-access-number
max-access-number
|
ip-pool
pool-name
|
ipv6-pool
ipv6-pool-name
|
ipv6-prefix
ipv6-prefix prefix-length
|
mld
max-access-number
max-access-number
|
{
primary-dns
|
secondary-dns
}
{
ip
ipv4-address
|
ipv6
ipv6-address
} |
session-group-profile
session-group-profile-name
|
session-timeout timeout
|
url
url-string
|
user-group
user-group-name
|
user-priority
{
inbound
|
outbound
}
priority
|
user-profile profile-name
|
vpn-instance
vpn-instance-name
}
The default settings are as follows:
•
The idle cut feature is
disabled.
•
An IPv4 user can concurrently
join a maximum of four IGMP
multicast groups.
•
An IPv6 user can concurrently
join a maximum of four MLD
multicast groups.
•
No other authorization
attributes exist.
The
user-priority
attribute takes
effect only on SPEX cards
(excluding the CSPEX-1204 card).
For IPoE, portal, and PPP users
that access the network through
Layer 3 aggregate interfaces or
Layer 3 aggregate subinterfaces,
you can apply the authorization
user priority only to upstream
packets of users.
The
user-profile
attribute takes
effect only on CSPEX cards.
The
session-group-profile
attribute does not take effect.
Including the idle timeout period in the user online duration to be sent to the server
If a user goes offline due to connection failure or malfunction, the user's online duration sent to the
server includes the idle timeout period. The online duration that is generated on the server is longer
than the actual online duration of the user.
Typically, the idle timeout period is authorized by the authorization server after users pass
authentication. For portal users, the idle timeout period set for the online portal user detection feature
takes priority over the server-assigned idle timeout period. For more information about online
detection for portal users, see "
Configuring portal authentication
."
To include the idle timeout period in the user online duration to be sent to the server:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter ISP domain view.
domain
isp-name
N/A
3.
Configure the device to
include the idle timeout
period in the user online
duration to be sent to the
server.
session-time include-idle-time
By default, the user online
duration sent to the server
excludes the idle timeout period.
Specifying the user address type in an ISP domain
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter ISP domain view.
domain
isp-name
N/A
