Command Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Chapter 1 AAA/RADIUS/HWTACACS
Configuration Commands
1-14
Parameters
local
: Performs local authorization.
none
: Does not perform any authorization. In this case, an authenticated user is
automatically authorized with the default right.
radius-scheme radius-scheme-name
: Specifies a RADIUS scheme by its name, which
is a string of 1 to 32 characters.
Description
Use the
authorization lan-access
command to specify the authorization scheme for
LAN access users.
Use the
undo authorization lan-access
command to restore the default.
By default, the default authorization scheme is used for LAN access users.
Note that the RADIUS scheme specified for the current ISP domain must have been
configured.
Related commands:
authorization default
,
radius scheme
.
Examples
# Configure the default ISP domain
system
to use the local authorization scheme for
LAN access users.
<Sysname> system-view
[Sysname] domain system
[Sysname-isp-system]authorization lan-access local
# Configure the default ISP domain
system
to use RADIUS authorization scheme
rd
for LAN access users and to use the local authorization scheme as the backup scheme.
<Sysname> system-view
[Sysname] domain system
[Sysname-isp-system] authorization lan-access radius-scheme rd local
1.1.15 authorization login
Syntax
authorization login
{
hwtacacs-scheme
hwtacacs-scheme-name
[
local
] |
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] }
undo authorization login
View
ISP domain view
