R21xx-HP FlexFabric 11900 Security Command Reference

17
Parameters
active: Places the ISP domain in active state to allow the users in the ISP domain to request network
services.
block: Places the ISP domain in blocked state to prevent users in the ISP domain from requesting network
services.
Usage guidelines
By blocking an ISP domain, you disable offline users of the domain from requesting network services. The
online users are not affected.
Examples
# Place the ISP domain test in blocked state.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] state block
Related commands
display domain
Local user commands
authorization-attribute
Use authorization-attribute to configure authorization attributes for a local user or user group. After the
local user or a local user in the user group passes authentication, the device assigns these attributes to the
user.
Use undo authorization-attribute to restore the default.
Syntax
authorization-attribute { acl acl-number | idle-cut minute | user-role role-name | vlan vlan-id |
work-directory directory-name } *
undo authorization-attribute { acl | idle-cut | user-role role-name | vlan | work-directory } *
Default
No authorization attribute is configured for a local user or user group.
Views
Local user view, user group view
Predefined user roles
network-admin
Parameters
acl acl-number: Specifies the authorization ACL. The ACL number must be in the range of 2000 to 5999.
After passing authentication, a local user can access the network resources specified by this ACL.
idle-cut minute: Sets the idle timeout period. With the idle cut function enabled, an online user whose idle
period exceeds the specified idle timeout period is logged out. The minute argument must be in the range
of 1 to 120 minutes.