25
[Sysname-isp-test] authorization ppp radius-scheme rd local
Related commands
• authorization default
• hwtacacs scheme
• local-user
• radius scheme
authorization-attribute (ISP domain view)
Use authorization-attribute to configure authorization attributes for users in an ISP domain.
Use undo authorization-attribute to restore the default of an authorization attribute.
Syntax
authorization-attribute { idle-cut minute [ flow ] | ip-pool pool-name }
undo authorization-attribute { idle-cut | ip-pool }
Default
No IP address pool is specified for PPP users in the ISP domain and the idle cut function is disabled.
Views
ISP domain view
Predefined user roles
network-admin
Parameters
idle-cut minute: Sets the idle timeout period in minutes. The value range for the minute argument is 1 to
600.
flow: Specifies the minimum traffic that must be generated in the idle timeout period in bytes, in the range
of 1 to 10240000. The default is 10240 bytes.
ip-pool pool-name: Specifies the IP address pool for PPP users. The pool-name argument is a
case-sensitive string of 1 to 31 characters.
Usage guidelines
When the idle cut function is configured, the device periodically detects the traffic of each online user.
The device logs out users who do not meet the minimum traffic requirement in the idle timeout period.
When the idle cut function is disabled on the device, the idle cut function of the server takes effect. The
server marks a user as idle if the user's traffic is less than 10240 bytes in a configurable idle timeout
period.
The IP address pool is used for address assignment when an authenticated user does not obtain an IP
address from the server or NAS. For information about IP address allocation for PPP users, see Layer
2—WAN Access Configuration Guide.
You can configure multiple authorization attributes for users in an ISP domain. If you execute the
command multiple times with the same keyword specified, the most recent configuration takes effect.
Examples
# Configure the idle cut function for users in the ISP domain named test.
<Sysname> system-view
To Next Page
Loading...
Need help?
General
