block(AAA domain view)

Function

The block command sets a domain to the blocked state.

The undo block command restores the default setting.

By default, a newly-created domain is in the activated state.

This command is supported only on the NetEngine 8000 F1A.

Format

block

undo block

Parameters

None

Views

AAA domain view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
bras-control	write

Usage Guidelines

To stop using a domain, you can set the status of this domain to blocked. In this case, all the users in this domain are prevented from accessing the Internet, but the users who have gone online can remain online.

NOTE:

A blocked domain still responds with PADO packets after receiving PADI packets from terminals.

In user access load balancing scenarios, PADI packets from a terminal can reach multiple BAS interfaces. If any of these BAS interfaces responds with PADO packets, the terminal user will use this BAS interface to go online. However, if the BAS interfaces that responds with PADO packets is blocked, the terminal user cannot go online. In this case, run the access-delay command in the BAS interface view to set an access delay after which the terminal user can re-select a BAS interface to go online.

Example

# Set domain isp1 to the blocked state.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] domain isp1
[*HUAWEI-aaa-domain-isp1] block