2-2Task RemarksCreating an ISP Domain and Configuring ItsAttributes RequiredConfiguring separate AAA schemes RequiredConfiguring an AAA Scheme for an ISPDomainRequiredWith separate AAA schemes, youcan specify authentication,authorization and accountingschemes respectively.You need to configure RADIUS orHWATACACS before performingRADIUS or HWTACACSauthentication.Configuring Dynamic VLAN Assignment OptionalConfiguring the Attributes of a Local User OptionalAAAconfigurationCutting Down User Connections Forcibly OptionalCreating an ISP Domain and Configuring Its AttributesFollow these steps to create an ISP domain and configure its attributes:To do… Use the command… RemarksEnter system view system-view —Configure the form of thedelimiter between theusername and the ISP domainnamedomain delimiter { at | dot }OptionalBy default, the delimiterbetween the username and theISP domain name is “@”.Create an ISP domain or set anISP domain as the default ISPdomaindomain { isp-name | default{ disable | enable isp-name } }RequiredIf no ISP domain is set as thedefault ISP domain, the ISPdomain "system" is used as thedefault ISP domain.Set the status of the ISPdomain state { active | block }OptionalBy default, an ISP domain is inthe active state, that is, all theusers in the domain are allowedto request network service.Set the maximum number ofaccess users that the ISPdomain can accommodateaccess-limit { disable |enable max-user-number }OptionalBy default, there is no limit onthe number of access usersthat the ISP domain canaccommodate.Set the idle-cut function idle-cut { disable | enableminute flow }OptionalBy default, the idle-cut functionis disabled.
