Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-13
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system] undo authorization default
1.1.12 authorization lan-access
Syntax
authorization lan-access
{
radius-scheme
radius-scheme-name
[
local
] |
local
|
none
}
undo authorization lan-access
View
ISP domain view
Parameter
radius-scheme-name
: Name of RADIUS scheme, a string not exceeding 32 characters.
local
: Local authorization.
none
: Direct authorization. In this case, the user passes the authentication directly, but
only owns the default rights.
Description
Use the
authorization lan-access
command to configure authorization for a
lan-access user.
Use the
undo authorization lan-access
command to remove authorization for a
lan-access user.
Related command:
authorization default
.
Example
# In the default ISP domain named system, configure
local
as the authorization
scheme for the lan-access user.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system]authorization lan-access local
# In the default ISP domain named system, configure
radius
as the authorization
scheme named rd for the lan-access user and
local
as backup authorization. Note that
the rd scheme must be already configured. Related command:
radius scheme.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
