Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-9
Parameter
radius-scheme-name
: Name of RADIUS scheme, a string not exceeding 32 characters.
local
: Local authentication.
none
: No authentication.
Description
Use the
authentication lan-access
command to configure authentication scheme for
a lan-access user.
Use the
undo authentication lan-access
command to remove authentication scheme
for a lan-access user.
Related command:
authentication default
.
Example
# In the default ISP domain named system, configure
local
as the authentication
scheme for the lan-access user.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system] authentication lan-access local
# In the default ISP domain named system, configure
radius
as the default
authentication named rd for the lan-access user and
local
as backup authentication.
Note that rd authentication must be already configured. Related command:
radius
scheme.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system] authentication lan-access radius-scheme rd local
# In the default ISP domain named system, remove the authentication scheme for the
lan-access user.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system] undo authentication lan-access
1.1.9 authentication login
Syntax
authentication login
{
radius-scheme
radius-scheme-name
[
local
] |
hwtacacs-scheme
hwtacacs-scheme-name
[
local
] |
local
|
none
}