redirect-domain effect-attribute

Function

The redirect-domain effect-attribute command enables specified fields to take effect in a domain that CoA delivers or a domain to which users are directed after they use up quotas.

The undo redirect-domain effect-attribute command disables configured fields from taking effect in the domain that CoA delivers or a domain to which users are directed after they use up quotas.

By default, when a user's domain is switched using CoA messages, the system updates the user's domain information instead of the domain name in the user name. The system still uses the configurations in the original domain for other parameters. When a user is redirected after quota exhaustion, the system updates the user's user group information instead of the user's domain information. The system still uses the configurations in the original domain for other parameters.

Format

For NetEngine 8000 F1A:

redirect-domain effect-attribute { user-group | web-url | qos-profile | ip-unr-tag }

undo redirect-domain effect-attribute { user-group | web-url | qos-profile | ip-unr-tag }

For NetEngine 8000 F1A, NetEngine 8000 F2A:

redirect-domain effect-attribute accounting-scheme

undo redirect-domain effect-attribute accounting-scheme

Parameters

Parameter	Description	Value
user-group	Enables the user group to take effect.	-
web-url	Enables the redirection URL to take effect.	-
qos-profile	Enables the QoS profile to take effect.	-
ip-unr-tag	Enables the UNR tag to take effect.	-
accounting-scheme	Enables the accounting scheme to take effect.	-

Views

AAA domain view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
aaa-access	write

Usage Guidelines

Usage Scenario

To enable specified fields to take effect in a domain delivered in CoA messages or a domain to which users are directed after they use up quotas, run the

redirect-domain effect-attribute command in either of the following scenarios:

During user service domain switching, a RADIUS server uses CoA to deliver a domain for users so that the domain attributes are applied to users to change user behaviors such as access permission, accounting status, and access rate.
After user quotas are used up, the NetEngine 8000 F directs users to another domain to change user behaviors such as access permission, accounting status, and access rate, and determines whether to direct users to a Web page for adding their funds.

Configuration Impact

After the redirect-domain effect-attribute command is used, and at least one field is specified, users can be directed to another domain if they use up quotas.

After the redirect-domain effect-attribute accounting-scheme command is used and takes effect, the user accounting scheme will switch to another scheme and, the user accounting ID will change in the domain that CoA delivers or in a redirection domain.

If the redirect-domain effect-attribute command is not used and, only the user group ID changes, users will not be directed to another domain after they use up quotas.

If the redirect-domain effect-attribute command is run more than once, the latest configuration does not override previous one.

NOTE:

If user-group, web-url, qos-profile, accounting-scheme, or ip-unr-tag is specified in the redirect-domain effect-attribute command but is not configured in the domain delivered in CoA messages or the redirection domain, the field will not take effect.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Configure fields that are allowed to take effect in a domain named domain1 that CoA delivers or a redirection domain named domain1 after users use up quotas.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] domain domain1
[*HUAWEI-aaa-domain1] commit
[~HUAWEI-aaa-domain1] redirect-domain effect-attribute accounting-scheme