Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-12
hwtacacs-scheme-name
: Name of HWTACACS scheme, a string not exceeding 32
characters.
local
: Local authorization.
none
: Direct authorization. In this case, the user passes the authentication directly, but
only owns the default rights.
Description
Use the authorization default
command to configure the default authorization for all
users.
Use the
undo authorization default
command to restore the default authorization
scheme for all users.
By default, the
local
authorization is used.
It should be noted that:
z
The authorization scheme configured by
the
authorization default
command is
applicable to all users. Its priority is lower than that configured by a specified
access mode.
z
As a special procedure, RADIUS authorization takes effect when the radius
schemes for authentication and authorization are similar. In case of failure to all
RADIUS authorization, the reason returned to NAS is that the Server did not
respond.
Related command:
authentication default
and
accounting default
.
Example
# In the default ISP domain named system, configure
local
as the default authorization
for all users.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system] authorization default local
# In the default ISP domain named system, configure
radius
as the default
authorization named rd for all users and
local
as backup authorization. Note that the rd
scheme must be already configured. Related command:
radius scheme.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system] authorization default radius-scheme rd local
# In the default ISP domain named system, restore the default authorization scheme for
all users.
<Sysname>system-view
