69
scheme
: Enables remote AAA authentication.
Usage guidelines
For local password authentication, use the
super password
command to set a password.
For remote AAA authentication, set the username and password on the RADIUS or HWTACACS server.
If you specify both
local
and
scheme
keywords, the keyword first entered in the command takes
precedence, as follows:
•
scheme local
—Enables remote-then-local authentication mode. The device first performs AAA
authentication for temporary user role authorization. If the remote HWTACACS or RADIUS server
does not respond, or if the AAA configuration on the device is invalid, local password
authentication is performed.
•
local scheme
—Enables local-then-remote authentication mode. The device first performs local
password authentication. If no password is configured for the user role, the device performs remote
authentication.
For more information about AAA, see
Security Configuration Guide
.
Examples
# Enable local-only authentication for temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode local
# Enable remote-then-local authentication for temporary user role authorization.
<Sysname> system-view
[Sysname] super authentication-mode scheme local
Related commands
•
authentication super
(
Security Command Reference
)
•
super password
super default role
Use
super default role
to specify the default target user role for temporary user role authorization.
Use
undo super default role
to restore the default.
Syntax
super default role
rolename
undo super default role
Default
The default target user role is network-admin.
Views
System view
Predefined user roles
network-admin
