default-domain authentication ppp-user

Function

The default-domain authentication ppp-user command specifies the default authentication domain for PPP users.

The undo default-domain authentication ppp-user command restores the original default authentication domain for PPP users.

By default, the authentication domain for PPP users is default1.

This command is supported only on the NetEngine 8000 F1A.

Format

default-domain authentication ppp-user [ force ] domain-name

undo default-domain authentication ppp-user [ force ] domain-name

Parameters

Parameter	Description	Value
force	Indicates that the default domain is forcibly used as the authentication domain.	-
domain-name	Specifies the name of the default authentication domain for PPP users.	The value is a string of 1 to 64 characters.

Parameter

Description

Value

force

Indicates that the default domain is forcibly used as the authentication domain.

domain-name

Specifies the name of the default authentication domain for PPP users.

The value is a string of 1 to 64 characters.

Views

BAS interface view (GE), BAS interface view (VE), BAS interface view, BAS interface view (trunk)

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ppp	write

Usage Guidelines

Usage Scenario

This command specifies the default authentication domain for PPP users. If you do not specify the domain name in Web authentication, the default domain configured on the BAS interface is used as the authentication domain for users. Authentication, authorization, and accounting are performed on users based the policies configured for the default domain.

Prerequisites

The domain specified in this command must exist on the device. If the domain does not exist, create it on the device first.

Configuration Impact

If the default-domain authentication ppp-user command is configured, the authentication domain specified in this command is used as the default authentication domain for PPP users.
If the default-domain authentication ppp-user command is not configured but the default-domain authentication { force | replace } command is configured, the authentication domain specified in the default-domain authentication { force | replace } command is used as the default authentication domain for PPP users.
If neither of the commands is configured, the default authentication domain for PPP users is default1.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Configure the default authentication domain for PPP users as huawei on GigabitEthernet 0/1/1.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] domain huawei
[*HUAWEI-aaa-domain-huawei] commit
[~HUAWEI-aaa-domain-huawei] quit
[~HUAWEI-aaa] quit
[~HUAWEI] interface GigabitEthernet0/1/1
[~HUAWEI-GigabitEthernet0/1/1] bas
[~HUAWEI-GigabitEthernet0/1/1-bas] default-domain authentication ppp-user huawei