(Optional) Specifying a Group for a Domain
A domain can be specified to belong to a user group or a VPN instance. This allows the domain to be flexibly associated with various services.
Context
A domain can belong to any of the following groups:
User group
A user group is used to control the access right of users and implement ACLs. Up to 255 user groups can be configured on the NetEngine 8000 F.
VPN instance
Procedure
- Run system-view
The system view is displayed.
- Run aaa
The AAA view is displayed.
- Run domain domain-name
The domain view is displayed.
- Run either of the following commands:
To specify a user group for the domain, run the user-group group-name command.
To specify a VPN instance for the domain, run the vpn-instance instance-name command.
To specify an inbound VPN instance for the domain, run the vpn-instance vpn-instance-name inbound command.
Perform the instance configuration in hub and spoke networking scenarios. The VPN instances configured using the vpn-instance vpn-instance-name inbound command must be different from any of those configured using the vpn-instance vpn-instance-name command.
- Run commit
The configuration is committed.