3com 5500-SI Manual De Usuario

AAA and RADIUS Protocol Configuration 411

Among the above configuration tasks, creating ISP domain is compulsory, otherwise 
the user attributes cannot be distinguished. The other tasks are optional. You can 
configure them at requirements.

What is Internet Service Provider (ISP) domain? To make it simple, ISP domain is a 
group of users belonging to the same ISP. Generally, for a username in the 
userid@isp-name format, taking gw20010608@3com163.net as an example, the 
isp-name (that is

 

3com163.net) following the @ is the ISP domain name. When the 

Switch 5500 controls user access, as for an ISP user whose username is in 
userid@isp-name format, the system will take userid part as username for 
identification and take isp-name part as domain name.

The purpose of introducing ISP domain settings is to support the multi-ISP application 
environment. In such an environment, one access device might access users of 
different ISP. Because the attributes of ISP users, such as username and password 
formats, and so on, may be different, it is necessary to differentiate them through 
setting ISP domain. In the Switch 5500 units, ISP domain view, you can configure a 
complete set of exclusive ISP domain attributes on a per-ISP domain basis, which 
includes AAA policy ( RADIUS scheme applied) 

For the Switch 5500, each user belongs to an ISP domain. Up to 16 domains can be 
configured in the system. If a user has not reported their ISP domain name, the 
system will put them into the default domain. 

Perform the following configurations in System View.

Table 437   Creating/Deleting an ISP Domain

By default, a domain named “system” has been created in the system. Its attributes 
are all default values.

The relevant attributes of ISP domain include the AAA scheme, domain state, 
maximum number of users, the idle-cut function, the accounting optional option, the 
messenger alert and self-service server URL. 

Perform the following configurations in ISP Domain View.

The AAA schemes includes: 

■

RADIUS scheme—you can implement authentication, authorization, and 
accounting by referencing the RADIUS server group. The adopted RADIUS scheme 
is the one used by all the users in the ISP domain. For detailed information of the 
commands of setting RADIUS scheme, refer to “Configuring the RADIUS 
Protocol”.

■

Local authentication—if you use the local scheme, you can only implement 
authentication and authorization at local without RADIUS server. 

Create ISP domain or enter the view of a 
specified domain.

Remove a specified ISP domain

Enable the default ISP domain specified by 
isp-name

Restore the default ISP domain to "system" domain default disable