2-3
To do… Use the command… Remarks
Set the accounting-optional
switch
accounting optional
Optional
By default, the
accounting-optional switch is
off.
Set the messenger function
messenger time { enable limit
interval | disable }
Optional
By default, the messenger
function is disabled.
Set the self-service server
location function
self-service-url { disable |
enable url-string }
Optional
By default, the self-service
server location function is
disabled.
Note that:
z On a unified device, each access user belongs to an ISP domain. You can configure up to 16 ISP
domains on the device. When a user logs in, if no ISP domain name is carried in the user name, the
device assumes that the user belongs to the default ISP domain.
z If you have configured to use "." as the delimiter, for a user name that contains multiple ".", the first
"." will be used as the domain delimiter.
z If you have configured to use "@" as the delimiter, the "@" must not appear more than once in the
user name.
z If the system does not find any available accounting server or fails to communicate with any
accounting server when it performs accounting for a user, it does not disconnect the user as long
as the accounting optional command has been executed, though it cannot perform accounting for
the user in this case.
z The self-service server location function needs the cooperation of a RADIUS server that supports
self-service, such as comprehensive access management server (iMC). Through self-service,
users can manage and control their account or card numbers by themselves. A server installed
with self-service software is called a self-service server.
iMC Server is a service management system used to manage networks and ensure network and user
information security. With the cooperation of other networking devices in a network, a iMC server can
implement the AAA functions and right management.
Configuring an AAA Scheme for an ISP Domain
You can configure either of the following AAA schemes:
Configuring a combined AAA scheme
You can use the scheme command to specify an AAA scheme for an ISP domain. If you specify a
RADIUS or HWTACACS scheme, the authentication, authorization and accounting will be uniformly
implemented by the RADIUS or TACACS server(s) specified in the RADIUS or HWTACACS scheme. In
