H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 63)

49
Step Command Remarks
5. Configure the idle cut
function.
idle-cut enable minute [ flow ]
Optional.
Disabled by default
This command is effective only for
LAN users, portal users, and PPP
users.
6. Enable the self-service server
location function and specify
the URL of the self-service
server.
self-service-url enable url-string
Optional.
Disabled by default.
7. Define an IP address pool for
allocating addresses to PPP
users.
ip pool pool-number
low-ip-address [ high-ip-address ]
Optional.
By default, no IP address pool is
configured for PPP users.
8. Specify the default
authorization user profile. authorization-attribute user-profile
profile-name
Optional.
By default, an ISP domain has no
default authorization user profile.
9. Set the device to include the
idle cut time in the user online
time to be uploaded to the
server.
session-time include-idle-time
Optional.
By default, the user online time
uploaded to the server excludes the
idle cut time.
IMPORTANT:
In a portal stateful failover scenario, use an idle cut interval that is greater than 5 minutes to make sure
data of online users can be backed up.
NOTE:
•
If a user passes authentication but is authorized with no user profile, the device authorizes the default
user profile of the ISP domain to the user and restricts the user's behavior based on the profile. For more
information about user profiles, see "Configuring user profiles."
• A self-service RADIUS server, such as Intelligent Management Center (IMC), is required for the
self-service server location function to work.
Configuring AAA authentication methods for an ISP domain
In AAA, authentication, authorization, and accounting are separate processes. Authentication refers to
the interactive authentication process of username/password/user information during an access or
service request. The authentication process does not send authorization information to a supplicant or
trigger accounting.
AAA supports the following authentication methods:
• No authentication (none)—All users are trusted and no authentication is performed. Generally, do
not use this method.
• Local authentication (local)—Authentication is performed by the NAS, which is configured with the
user information, including the usernames, passwords, and attributes. Local authentication features
high speed and low cost, but the amount of information that can be stored is limited by the
hardware.