idle-user-redirect

Function

The idle-user-redirect command binds an idle suppression user group to a specified domain.

The undo idle-user-redirect command cancels the configuration.

By default, no idle suppression user group is bound to a domain.

This command is supported only on the NetEngine 8000 F1A.

Format

idle-user-redirect user-name [ timeout time-value ]

undo idle-user-redirect [ user-name ]

Parameters

Parameter	Description	Value
user-name	Specifies the name of a user group to which idle users will be redirected.	The value is a string of 1 to 32 case-sensitive characters, spaces not supported.
timeout time-value	Specifies a timeout period after which an idle user will be redirected to a user group.	The value is an integer ranging from 1 to 60, in minutes. The default value is 30.

Parameter

Description

Value

user-name

Specifies the name of a user group to which idle users will be redirected.

The value is a string of 1 to 32 case-sensitive characters, spaces not supported.

timeout time-value

Specifies a timeout period after which an idle user will be redirected to a user group.

The value is an integer ranging from 1 to 60, in minutes. The default value is 30.

Views

AAA domain view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
aaa-access	write

Usage Guidelines

Usage Scenario

No authentication is performed for a user in the pre-authentication domain. When the set timeout period expires, the user is redirected to a user group using a unique CP-CAR to send packets. This implementation ensures the packets sent by premium users (instant authentication when they log in) can be handled preferentially. Purpose of redirecting to the user group: New exception ID and CP-CAR are used. You can lower the CP-CAR to suppress the matched user-group protocol packets.

The command configuration takes effect immediately after being run. After it is configured in the domain, the command takes effect for online users.

Precautions

In VS mode, this command is supported only by the admin VS.

If the timeout period is shorter than 10 minutes, switchover is performed frequently, which may cause incorrect switchover.

Example

# Bind the user group named "test" to a specified domain, and set the timeout period to 20 minute.

<HUAWEI> system-view
[~HUAWEI] user-group test
[~HUAWEI] aaa
[~HUAWEI-aaa] domain domain1
[*HUAWEI-aaa-domain-domain1] idle-user-redirect test timeout 20