Command Manual (For Soliton) – AAA
H3C S3100 Series Ethernet Switches
Chapter 1 AAA Configuration Commands
1-26
z
If you execute the
scheme
hwtacacs-scheme hwtacacs-scheme-name local
command, the local scheme is used as the secondary scheme in case no
TACACS server is available. That is, if the communication between the switch and
a TACACS server is normal, no local authentication is performed; If the TACACS
server is not reachable or there is a key error or NAS IP error, local authentication
is performed.
z
If you execute the
scheme
local
or
scheme
none
command to use
local
or
none
as the primary scheme, the local authentication is performed or no authentication
is performed. In this case, no secondary scheme can be specified and therefore
no scheme switching will occur.
z
Both the
radius-scheme
command and the
scheme
command can be used to
specify the RADIUS scheme to be quoted for the ISP domain. Their functions are
the same and the system takes the latest configuration.
Related commands:
radius scheme
,
display domain
.
Examples
# Configure the ISP domain aabbcc.net to use RADIUS scheme radius1 as the primary
AAA scheme and use the local scheme as the secondary authentication scheme.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain aabbcc.net
New Domain added.
[Sysname-isp-aabbcc.net] scheme radius-scheme raduis1 local
1.1.24 self-service-url
Syntax
self-service-url
{
disable
|
enable
url-string
}
undo self-service-url
View
ISP domain view
Parameters
url-string
: URL of the web page used to modify user password on the self-service server.
It is a string of 1 to 64 characters. This string cannot contain any question mark "?". If
the actual URL of the self-service server contains a question mark, you should change
it to an elect bar "|".
Description
Use the
self-service-url enable
command to enable the self-service server location
function