What are the functions of domain and global default domain

The device manages access users based on domains. Each access user belongs to a domain.

The authentication, authorization, and accounting schemes can be bound to the domain views. The device manages the access users in the same domain in the same manner, for example, the same authentication, authorization, and accounting scheme.

The domain of an access user is decided by the user name the user entered in login, and the device authenticates the user according to the domain in the user name. If the user name does not contain a domain name, the device adds the user to the global default domain according to the user access type and authenticates the user based on the configuration of the global default domain.

The administrator (logging in through Telnet, SSH, FTP, HTTP, or Terminal) is authenticated in the global default administrative domain. By default, the global administrative domain is default_admin.

You can run the domain domain-name admin command in the system view to configure the global default administrative domain.

The common users (logging in through MAC, Portal, 802.1x, or PPP authentication) are authenticated in the global default common domain. By default, the global common domain is default.

You can run the domain domain-name command in the system view to configure the global default common domain.

NOTE:
You can modify the configuration of the global default domains by default, but cannot delete the domains.

Scroll to top