Configuring a Forcible Domain

This section provides a sample of configuring a forcible domain using the remove method.

**Table 1** Configuring a forcible domain
Operation	XPATH
edit-config:remove	/huawei-nac:nac-access/configure-mode/unified-mode/authentication-profile/force-domain/default-force-domain

Data Requirement

**Table 2** Configuring a forcible domain
Item	Data	Description
domain-name	domain1	Configure a forcible domain. The domain must exist on the switch.

Request Example

<rpc xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="DEVICECONFIG_012824316d704d43adb16b1a4245d273">
 <edit-config>
  <target>
   <running/>
  </target>
  <error-option>rollback-on-error</error-option>
  <config>
   <aaa xmlns="urn:huawei:params:xml:ns:yang:huawei-aaa">
    <aaa-domain xmlns:ns0="urn:ietf:params:xml:ns:netconf:base:1.0" ns0:operation="merge">
     <name>domain1</name>
     <vsys>ads</vsys>
    </aaa-domain>
   </aaa>
   <nac-access xmlns="urn:huawei:params:xml:ns:yang:huawei-nac">
    <authentication-profile xmlns:ns0="urn:ietf:params:xml:ns:netconf:base:1.0" ns0:operation="remove">
     <name>authen_pro</name>
     <force-domain>
      <default-force-domain>domain1</default-force-domain>
     </force-domain>
    </authentication-profile>
   </nac-access>
  </config>
 </edit-config>
</rpc>

Response Example

Sample of successful response

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="DEVICECONFIG_012824316d704d43adb16b1a4245d273">
 <ok/>
</rpc-reply>

Sample of failed response

<?xml version='1.0' encoding='UTF-8'?>
<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="54">
  <rpc-error>
    <error-app-tag>-1</error-app-tag>
    <error-message>config/undo  access domain failed</error-message>
    <error-info>Error on node /huawei-nac:nac-access/authentication-profile[name="authen_pro"]/force-domain/default-force-domain</error-info>
  </rpc-error>
</rpc-reply>