3com 4500 26-PORT User Manual

Page of 466
260
C
HAPTER
 11: U
SING
 AAA 
AND
 RADIUS C
OMMANDS
Table 30   Output description of the 
display local-user 
command
domain
Syntax
domain { isp-name | default { disable | enable isp-name }}
undo domain isp-name
View
System View
Parameter
isp-name:
 Specifies an ISP domain name. The name is expressed with a character 
string not exceeding 24 characters, excluding “/”, “: ”, “*”, “? ”, “<”, and “>”. 
default enable isp-name:
 Enables the default ISP domain specified by 
isp-name
.
default disable:
 Restores the default ISP domain to 
system
.
Description
Use the 
domain
 command to configure an ISP domain or enter the view of an 
existing ISP domain. Use the 
undo domain
 command to cancel a specified ISP 
domain. 
By default, a domain named system has been created in the system. The 
attributes of system are all default values. 
ISP domain is a group of users belonging to the same ISP. Generally, for a 
username in the userid@isp-name format, taking 
gw20010608@3Com163.net
 as an 
example, the isp-name (that is, 
3Com163.net
) following the @ is the ISP domain 
name.  When 3Com 4500 Series Ethernet Switches control user access, as for an 
ISP user whose username is in 
userid@isp-name
 format, the system will take 
userid part as username for identification and take isp-name part as domain 
name.
The purpose of introducing ISP domain settings is to support the application 
environment with several ISP domains. In this case, an access device may have 
supplicants from different ISP domains. Because the attributes of ISP users, such as 
username and password structures, service types, may be different, it is necessary 
to separate them by setting ISP domains. In ISP Domain View, you can configure a 
complete set of exclusive ISP domain attributes for each ISP domain, which 
includes AAA schemes ( RADIUS scheme applied and so forth.) 
Field
Description
State
The state of the user
Idle-Cut
The state of the idle-cut Switch
Access-Limit
The limit of the number of access users
Bind location
Indicates whether a port is bound with or not
VLAN ID
The ID of the VLAN to which the user is bound
IP address
The bound ip address of the user
MAC address
The bound MAC address of the user
FTP Directory 
The directory authorized to FTP users