3Com 4500 PWR 50-PORT Switch User Manual


 
260 CHAPTER 11: USING AAA AND RADIUS COMMANDS
Table 30 Output description of the display local-user command
domain Syntax
domain { isp-name | default { disable | enable isp-name }}
undo domain isp-name
View
System View
Parameter
isp-name: Specifies an ISP domain name. The name is expressed with a character
string not exceeding 24 characters, excluding “/”, “: ”, “*”, “? ”, “<”, and “>”.
default enable isp-name: Enables the default ISP domain specified by
isp-name.
default disable: Restores the default ISP domain to system.
Description
Use the domain command to configure an ISP domain or enter the view of an
existing ISP domain. Use the
undo domain command to cancel a specified ISP
domain.
By default, a domain named system has been created in the system. The
attributes of system are all default values.
ISP domain is a group of users belonging to the same ISP. Generally, for a
username in the userid@isp-name format, taking
gw20010608@3Com163.net as an
example, the isp-name (that is,
3Com163.net) following the @ is the ISP domain
name. When 3Com 4500 Series Ethernet Switches control user access, as for an
ISP user whose username is in
userid@isp-name format, the system will take
userid part as username for identification and take isp-name part as domain
name.
The purpose of introducing ISP domain settings is to support the application
environment with several ISP domains. In this case, an access device may have
supplicants from different ISP domains. Because the attributes of ISP users, such as
username and password structures, service types, may be different, it is necessary
to separate them by setting ISP domains. In ISP Domain View, you can configure a
complete set of exclusive ISP domain attributes for each ISP domain, which
includes AAA schemes ( RADIUS scheme applied and so forth.)
Field Description
State The state of the user
Idle-Cut The state of the idle-cut Switch
Access-Limit The limit of the number of access users
Bind location Indicates whether a port is bound with or not
VLAN ID The ID of the VLAN to which the user is bound
IP address The bound ip address of the user
MAC address The bound MAC address of the user
FTP Directory The directory authorized to FTP users