permit-domain

Function

The permit-domain command specifies permitted domains for WLAN users.

The undo permit-domain command deletes the permitted domains of WLAN users.

By default, no permitted domain is specified for WLAN users.

This function is supported only by S5730-HI, S5731-H, S5731S-H, S6730-H, S6730S-H, S5732-H, S6720-HI, and S5720-HI.

Format

permit-domain name domain-name &<1-4>

undo permit-domain { name domain-name | all }

Parameters

Item	Description	Value
name domain-name	Specifies the name of a permitted domain for WLAN users.	The domain must already exist.
all	Deletes the permitted domain for all WLAN users.	-

Views

Authentication profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After a permitted domain is specified on an authentication profile, only the WLAN users in the permitted domain can be authenticated, authorized, or charged.

Prerequisites

Permitted domains have been created using the domain command.

Precautions

This command applies only to wireless users.

When this command is executed in the authentication profile, the configuration takes effect only after the authentication profile is bound to a VAP profile.

This command is only available in the NAC unified mode.

Example

# Specify permitted domain dom for WLAN users to the authentication profile john.

<HUAWEI> system-view
[HUAWEI] aaa
[HUAWEI-aaa] domain dom   
[HUAWEI-aaa-domain-dom] quit 
[HUAWEI-aaa] quit 
[HUAWEI] authentication-profile name john
[HUAWEI-authen-profile-john] permit-domain name dom