The domain command configures the default domain or force domain for users.
The undo domain command deletes the configured default domain or force domain.
By default, no default domain or force domain is configured for users.
Layer 2 interface view:
domain name domain-name [ dot1x | mac-authen | portal ] [ force ]
undo domain name domain-name [ dot1x | mac-authen | portal ] [ force ]
VLANIF interface view:
domain name domain-name [ mac-authen | portal ] [ force ]
undo domain name domain-name [ mac-authen | portal ] [ force ]
Layer 3 interface view:
domain name domain-name [ portal ] [ force ]
undo domain name domain-name [ portal ] [ force ]
System view (for all access authentication users):
domain domain-name force [ mac-address mac-address mask mask ]
undo domain domain-name force [ mac-address mac-address ]
System view (only for MAC address authentication users):
domain domain-name mac-authen force
undo domain domain-name mac-authen force
domain name domain-name mac-authen force [ mac-address mac-address mask mask ]
undo domain name domain-name mac-authen force [ mac-address mac-address ]
Parameter |
Description |
Value |
|---|---|---|
name domain-name |
Specifies the name of the default domain or force domain. If no user authentication mode is specified, the default domain or force domain takes effect for all access authentication users. |
The value must be an existing domain name on the device. |
| dot1x | Specifies 802.1X authentication as the user authentication mode. |
- |
| mac-authen | Specifies MAC address authentication as the user authentication mode. |
- |
| portal | Specifies Portal authentication as the user authentication mode. |
- |
System view, VLANIF interface view, Ethernet interface view, GE interface view, XGE interface view, 40GE interface view, Eth-Trunk interface view, Port group view
This command is available to aid upgrade compatibility. It can only be run during the configuration restoration phase of the upgrade.
After the upgrade, this command is no longer supported, and it is replaced by the access-domain domain-name [ dot1x | mac-authen | portal ]* [ force ] command in the authentication profile view.