1-7
The Switch 5500-EI adopts hierarchical protection for command lines so as to inhibit users at lower
levels from using higher level commands to configure the switches. For details about configuring a
HWTACACS authentication scheme for low-to-high user level switching, refer to
Switching
User Level
in the
Command Line Interface Operation
.
Related commands:
hwtacacs scheme
.
Examples
# Set the HWTACACS scheme to
ht
for user level switching in the current ISP domain aabbcc.net.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain aabbcc.net
New Domain added.
[Sysname-isp-aabbcc.net] authentication super hwtacacs-scheme ht
authorization
Syntax
authorization
{
none
|
hwtacacs-scheme
hwtacacs-scheme-name
}
undo authorization
View
ISP domain view
Parameters
none
: Specifies not to use any authorization scheme.
hwtacacs-scheme hwtacacs-scheme-name
: Specifies to use an HWTACACS scheme. Here,
hwtacacs-scheme-name
is the name of an HWTACACS scheme; it is a string of up to 32 characters.
Description
Use the
authorization
command to configure an authorization scheme for current ISP domain.
Use the
undo authorization
command to restore the default authorization scheme setting of the ISP
domain.
By default, no separate authorization scheme is configured for an ISP domain.
Related commands:
scheme
,
radius scheme
,
hwtacacs scheme
.
Examples
# Allow users in ISP domain aabbcc.net to access network services without being authorized.
<Sysname> system-view
Summary of Contents for 5500-EI PWR
Page 43: ...2 6...
Page 76: ...1 17...
Page 228: ...ii stp transmit limit 1 44 vlan mapping modulo 1 45 vlan vpn tunnel 1 46...
Page 477: ...5 24 Sysname vlan 2 Sysname vlan2 service type multicast...
Page 503: ...2 3 System View return to User View with Ctrl Z Sysname dot1x url http 192 168 19 23...
Page 519: ...iii...
Page 597: ...2 2 security policy server 192 168 0 1 user name format without domain...
Page 648: ...1 9 Examples Clear static ARP entries Sysname reset arp static...
Page 663: ...4 3 Sysname resilient arp interface vlan interface 2...
Page 767: ...1 28 From 12 00 Jan 1 2008 to 12 00 Jun 1 2008...
Page 1111: ...ii xmodem get 3 18...
Page 1314: ...A 44 Z...