service-type (authentication domain view)

Function

The service-type command configures the access control of an authentication domain.

Format

service-type { administrator-access | dot1x | internetaccess | ike | l2tp | ssl-vpn } ^*

Parameters

Parameter	Description	Value
administrator-access	Indicates that the access control for the authentication domain allows the access of administrator.	-
dot1x	Indicates that the access control for the authentication domain allows the access of 802.1x users.	-
internetaccess	Indicates that the access control for the authentication domain is Internet behavior management. Policy-based control can be implemented.	-
ike	Indicates that the access control for the authentication domain allows the access of IKEv2 IPSec users using EAP authentication.	-
l2tp	Indicates that the access control for the authentication domain allows the access of L2TP/L2TP over IPSec users.	-
ssl-vpn	Indicates that the access control for the authentication domain allows the access of SSL VPN users.	-

Views

Authentication domain view

Default Level

2: Configuration level

Usage Guidelines

by default, the authentication domain allows the access of Internet access users, IPSec users using IKEv2 EAP authentication, IPSec users using IKEv1 xAuth authentication, L2TP/L2TP over IPSec users, 802.1x users, and SSL VPN users.

The service-type command is invalid for PPPoE users.

Example

# Configure the access control for authentication domain domain1 as online behavior management.

<sysname> system-view
[sysname] aaa
[sysname-aaa] domain domain1
[sysname-aaa-domain-domain1] service-type internetaccess