H3C SOHO IE4300, Справочник по командам

Страница: 1793 / 3296

12
You can specify one primary default authentication method and multiple backup default
authentication methods.
When the primary method is invalid, the device attempts to use the backup methods in sequence.
For example, the
authentication default radius-scheme radius-scheme-name
local none
command specifies a primary default RADIUS authentication method and two backup
methods (local authentication and no authentication). The device performs RADIUS authentication
by default and performs local authentication when the RADIUS server is invalid. The device does not
perform authentication when both of the previous methods are invalid.
Examples
# In ISP domain test , use RADIUS scheme rd as the primary default authentication method and use
local authentication as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authentication default radius-scheme rd local
Related commands
hwtacacs scheme
ldap scheme
local-user
radius scheme
authentication lan-access
Use
authentication lan-access
to specify authentication methods for LAN users.
Use undo authentication lan-access to restore the default.
Syntax
In non-FIPS mode:
authentication lan-access { ldap-scheme ldap-scheme-name [ local ] [ none ]
| local [ none ] | none | radius-scheme radius-scheme-name [ local ] [ none ] }
undo authentication lan-access
In FIPS mode:
authentication lan-access { ldap-scheme ldap-scheme-name [ local ] | local
| radius-scheme radius-scheme-name [ local ] }
undo authentication lan-access
Default
The default authentication methods of the ISP domain are used for LAN users.
Views
ISP domain view
Predefined user roles
network-admin
Parameters
ldap-scheme ldap-scheme-name
: Specifies an LDAP scheme by its name, a case-insensitive
string of 1 to 32 characters.
local
: Performs local authentication.