authening authen-redirect online authen-domain

Function

The authening authen-redirect online authen-domain command configures a redirection domain when the user quota is used up.

The undo authening authen-redirect command cancels a configured redirection domain.

By default, no redirection domain is configured in the authentication scheme.

This command is supported only on the NetEngine 8000 F1A.

Format

authening authen-redirect online authen-domain domain-name

undo authening authen-redirect

Parameters

Parameter	Description	Value
domain-name	Specifies the name of a redirection domain.	The value is a string of 1 to 64 characters excluding *, ?, and ". The letters in the name are case-insensitive.

Parameter

Description

Value

domain-name

Specifies the name of a redirection domain.

The value is a string of 1 to 64 characters excluding *, ?, and ". The letters in the name are case-insensitive.

Views

Authentication scheme view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
aaa-access	write

Usage Guidelines

Usage Scenario

When the user quota is used up. In this case, the device redirects users to the domain allowing the users to go online through this domain.

In actual applications, you can configure a pool of private network IP addresses, user ACL-based access rights, and security domains in a redirection domain. In this manner, you can configure and isolate allocation of Internet and private network IP addresses, access rights in a differentiated manner. This saves Internet IP addresses and prevents users from occupying a great number of Internet IP addresses through illegal attacks.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Configure the redirection domain in the authentication scheme huawei as huawei.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] domain huawei
[*HUAWEI-aaa-domain-huawei] commit
[~HUAWEI-aaa-domain-huawei] quit
[~HUAWEI-aaa] authentication-scheme huawei
[*HUAWEI-aaa-authen-huawei] commit
[~HUAWEI-aaa-authen-huawei] authening authen-redirect online authen-domain huawei