Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-7
nas-ip ip-address
: Sets the IP address of the remote access server port to which the
user is bound to. Where,
ip-address
is in dotted decimal notation and is 127.0.0.1
(representing this device) by default. If the user is bound to a remote port, you must
specify the
nas-ip
parameter. If the user is bound to a local port, you need not specify
the
nas-ip
parameter.
port port-number
: Sets the port bound with the user.
Description
Use the
attribute
command to set the attributes of a user whose service type is
lan-access.
Use the
undo attribute
command to cancel attribute settings of the user.
Related command:
display local-user
.
Example
# Set the IP address of user1 to 10.110.50.1.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] local-user user1
[Sysname-luser-user1] attribute ip 10.110.50.1
1.1.7 authentication default
Syntax
authentication default
{
radius-scheme
radius-scheme-name
[
local
] |
hwtacacs-scheme
hwtacacs-scheme-name
[
local
] |
local
|
none
}
undo authentication default
View
ISP domain view
Parameter
radius-scheme-name
: Name of RADIUS scheme, a string not exceeding 32 characters.
hwtacacs-scheme-name:
Name of HWTACACS scheme, a string not exceeding 32
characters
local
: Local authentication.
none
: No authentication.
Description
Use the
authentication default
command to configure authentication scheme for all
users.