1762 CHAPTER 93: AAA/RADIUS/HWTACACS C ONFIGURATIONFollow these steps to create an ISP domain:n ■ You cannot delete the default ISP domain unless you change it to a non-defaultISP domain (with the domain default disable command) first.■ If a user enters a username without an ISP domain name, the device uses theauthentication scheme for the default ISP domain to authenticate the user.Configuring ISP DomainAttributesFollow these steps to configure ISP domain attributes:n A self-service RADIUS server, for example, CAMS, is required for the self-serviceserver localization function. With the self-service function, a user can manage andcontrol his or her accounting information or card number. A server withself-service software is a self-service server.Configuring an AAAAuthentication Schemefor an ISP DomainIn AAA, authentication, authorization, and accounting are three separateprocesses. Authentication refers to the interactive authentication process ofusername/password/user information during access or service request. TheTo do... Use the command... RemarksEnter system view system-view -Create an ISP domain andenter ISP domain viewdomain isp-name RequiredReturn to system view quit -Specify the default ISP domain domain default { disable| enable isp-name }OptionalThe system-default ISP domainnamed system by defaultTo do... Use the command... RemarksEnter system view system-view -Create an ISP domain andenter ISP domain viewdomain isp-name RequiredPlace the ISP domain to thestate of active or blockedstate { active | block } OptionalWhen created, an ISP is in thestate of active by default, andusers in the domain canrequest network services.Specify the maximum numberof accessing users in the ISPdomainaccess-limit { disable |enable max-user-number }OptionalNo limit by defaultConfigure the idle cutfunctionidle-cut { disable | enableminute }OptionalDisabled by defaultEnable the self-service serverlocalization function andspecify the URL of theself-service server forchanging user passwordself-service-url { disable |enable url-string }OptionalDisabled by defaultDefine an IP address pool forallocating addresses to PPPusersip pool pool-numberlow-ip-address[ high-ip-address ]OptionalNo IP address pool isconfigured for PPP users bydefault.
