Command Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
Huawei Technologies Proprietary
1-6
With the
authentication
command configured in an ISP domain view, the system
adopts the authentication scheme referenced in the command to authenticate the
users in the domain, or else it adopts the scheme referenced in the
scheme
command.
Related command:
scheme
and
radius scheme
,
hwtacacs scheme
.
Example
# Specify "radius" as the RADIUS authentication scheme to be referenced by the ISP
domain aabbcc.net.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] domain aabbcc.net
New Domain added.
[Quidway-isp-aabbcc.net] authentication radius-scheme radius
# Specify "rd" as the RADIUS authentication scheme to be referenced by the ISP
domain aabbcc, and the local scheme as the secondary authentication scheme.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] domain aabbcc
New Domain added.
[Quidway-isp-aabbcc] authentication radius-scheme rd local
1.1.6 authorization
Syntax
authorization
{
none
|
hwtacacs-scheme
hwtacacs-scheme-name
}
undo authorization
View
ISP domain view
Parameter
none
: No authentication scheme is adopted.
hwtacacs-scheme hwtacacs-scheme-name
: Name of a HWTACACS scheme, a
string of up to 32 characters.
Description
Use the
authorization
command to configure the authorization scheme of the current
ISP domain.
Use the
undo authorization
command to restore the default authorization scheme of
the ISP domain.