34
You can specify one primary authorization method and multiple backup authorization methods.
When the default authorization method is invalid, the device attempts to use the backup
authorization methods in sequence. For example, the
authorization portal
radius-scheme
radius-scheme-name
local
none
command specifies the default RADIUS authorization method and
two backup methods (local authorization and no authorization). The device performs RADIUS
authorization by default and performs local authorization when the RADIUS server is invalid. The
device does not perform authorization when both of the previous methods are invalid.
Examples
# In ISP domain
test
, perform local authorization for portal users.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization portal local
# In ISP domain
test
, perform RADIUS authorization for portal users based on scheme
rd
and use
local authorization as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization portal radius-scheme rd local
Related commands
authorization default
local-user
radius scheme
authorization ppp
Use
authorization ppp
to configure the authorization method for PPP users.
Use
undo authorization ppp
to restore the default.
Syntax
In non-FIPS mode:
authorization
ppp
{
hwtacacs-scheme
hwtacacs-scheme-name
[
radius-scheme
radius-scheme-name
] [
local
] [
none
] |
local
[
none
] |
none
|
radius-scheme
radius-scheme-name
[
hwtacacs-scheme
hwtacacs-scheme-name
] [
local
] [
none
] }
undo authorization ppp
In FIPS mode:
authorization
ppp
{
hwtacacs-scheme
hwtacacs-scheme-name
[
radius-scheme
radius-scheme-name
] [
local
] |
local
|
radius-scheme
radius-scheme-name
[
hwtacacs-scheme
hwtacacs-scheme-name
] [
local
] }
undo authorization ppp
Default
The default authorization method for the ISP domain is used for PPP users.
Views
ISP domain view
Predefined user roles
network-admin
Summary of Contents for FlexNetwork MSR Series
Page 1005: ...987 ...
