3Com 5500-EI PWR, Справочное руководство

Страница: 542 / 1314

1-23
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain aabbcc.net
New Domain added.
[Sysname-isp-aabbcc.net] radius-scheme extended
scheme
Syntax
scheme
{
local
|
none
|
radius-scheme radius-scheme-name
[
local
] |
hwtacacs-scheme
hwtacacs-scheme-name
[
local
] }
undo scheme
[
none
|
radius-scheme
|
hwtacacs-scheme
]
View
ISP domain view
Parameters
radius-scheme-name
: Name of a RADIUS scheme, a string of up to 32 characters.
hwtacacs-scheme-name
: Name of a HWTACACS scheme, a string of up to 32 characters.
local
: Specifies to use local authentication.
none
: Specifies not to perform authentication.
Description
Use the
scheme
command to configure an AAA scheme for current ISP domain.
Use the
undo scheme
command to restore the default AAA scheme configuration for the ISP domain.
By default, the ISP domain uses the
local
AAA scheme.
Note that:
z
When you execute the
scheme
command to reference a RADIUS scheme in current ISP domain,
the referenced RADIUS scheme must already exist.
z
If you execute the
scheme radius-scheme radius-scheme-name local
command, the local
scheme is used as the secondary scheme in case no RADIUS server is available. That is, if the
communication between the switch and a RADIUS server is normal, no local authentication is
performed; otherwise, local authentication is performed.
z
If you execute the
scheme hwtacacs-scheme hwtacacs-scheme-name local
command, the local
scheme is used as the secondary scheme in case no TACACS server is available. That is, if the
communication between the switch and a TACACS server is normal, no local authentication is
performed; If the TACACS server is not reachable or there is a key error or NAS IP error, local
authentication is performed.
z
If you execute the
scheme local
or
scheme none
command to use
local
or
none
as the primary
scheme, the local authentication is performed or no authentication is performed. In this case, no
secondary scheme can be specified and therefore no scheme switching will occur.