radius-attribute hw-domain-name block

Function

The radius-attribute hw-domain-name block command configures an access policy for users if the domain delivered by the RADIUS server is blocked.

The undo radius-attribute hw-domain-name block command deletes the configuration.

By default, when the domain delivered by the RADIUS server is blocked, users can go online through this domain but cannot perform other operations.

This command is supported only on the NetEngine 8000 F1A.

Format

radius-attribute hw-domain-name block { online | offline }

undo radius-attribute hw-domain-name block { online | offline }

Parameters

Parameter	Description	Value
online	Allows users to go online if the domain delivered by the RADIUS server is blocked.	-
offline	Forbids users to go online if the domain delivered by the RADIUS server is blocked.	-

Parameter

Description

Value

online

Allows users to go online if the domain delivered by the RADIUS server is blocked.

offline

Forbids users to go online if the domain delivered by the RADIUS server is blocked.

Views

RADIUS server group view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ipoe	write

Usage Guidelines

Usage Scenario

When RADIUS authentication is configured for users, the users preferentially access through the domain delivered by the RADIUS server. By default, when the domain delivered by the RADIUS server is blocked, users can go online through this domain but cannot perform other operations. To prevent this situation, run the radius-attribute hw-domain-name block offline command in the RADIUS server group view so that new access users cannot go online through the domain delivered by the RADIUS server if the domain is blocked.

Configuration Impact

This command takes effect only for subsequent access users.

Example

# Configure the device to forbid RADIUS authentication users to go online through the domain delivered by the RADIUS server if the domain is blocked.

<HUAWEI> system-view
[~HUAWEI] radius-server group huawei
[*HUAWEI-radius-huawei] commit
[~HUAWEI-radius-huawei] radius-attribute hw-domain-name block offline