USG 63000

@dm_msk you mean not add the DOMAINNAME when login?

Hi there,

You can use the access-domain command to configure a default or forcible domain in an authentication profile for users.

Example

# Configure the forcible domain huawei in the authentication profile p1.

<sysname> system-view
[sysname] aaa
[sysname-aaa] domain huawei
[sysname-aaa-domain-huawei] quit
[sysname-aaa] quit
[sysname] authentication-profile name p1
[sysname-authentication-profile-p1] access-domain huawei force

For details, please refer to the  Product Documentation:

https://support.huawei.com/hedex/hdx.do?docid=EDOC1100068394&id=domain_force_u_1&lang=en

Sorry to misunderstand your problem. The access-domain command cannot solve your problem.
In local authentication, users in different domains can have the same user name. Therefore, @domain must be used to distinguish users in different domains. If you do not want to use @, all local user accounts should belong to the default domain.

Please refer to this example:
https://support.huawei.com/hedex/hdx.do?docid=EDOC1100068394&id=sec_admin_userauth_0070&lang=en

Thank you. It's work!