Command Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Chapter 1 AAA/RADIUS/HWTACACS
Configuration Commands
1-8
1.1.8 authentication default
Syntax
authentication default
{
hwtacacs-scheme
hwtacacs-scheme-name
[
local
] |
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] }
undo authentication default
View
ISP domain view
Parameters
hwtacacs-scheme hwtacacs-scheme-name
: Specifies an HWTACACS scheme by its
name, which is a string of 1 to 32 characters.
local
: Performs local authentication.
none
: Does not perform any authentication.
radius-scheme radius-scheme-name
: Specifies a RADIUS scheme by its name, which
is a string of 1 to 32 characters.
Description
Use the
authentication default
command to specify the default authentication scheme
for all types of users.
Use the
undo authentication default
command to restore the default.
By default, the authentication scheme is
local
.
Note that:
z
The RADIUS or HWTACACS scheme specified for the current ISP domain must
have been configured.
z
The authentication scheme specified with the
authentication default
command is
for all types of users and has a priority lower than that for a specific access mode.
Related commands:
authorization default
,
accounting default
,
hwtacacs scheme
,
radius scheme
.
Examples
# Configure the default ISP domain
system
to use the local authentication scheme for
all types of users.
<Sysname> system-view
[Sysname] domain system
[Sysname-isp-system] authentication default local
# Configure the default ISP domain
system
to use RADIUS authentication scheme
rd
for all types of users and to use the local authentication scheme as the backup scheme.
