3com 8807 참조 가이드

By default, an AAA scheme specifies to perform local authentications.

The scheme command specifies a RADIUS/HWTACACS scheme for the current ISP 
domain. The specified scheme must be an existing scheme.

You can use the radius-scheme radius-scheme-name local or hwtacacs-scheme 
hwtacacs-scheme-name local command to specify to perform local 
authentications in case the Radius Server or the Tacacs Server fails to respond 
properly. That is, local authentications are performed only when the Radius Server 
or the Tacas Server fails.

If you specify local authentications to be the primary scheme, then only local 
authentications are performed and you cannot adopt RADIUS and HWTACACS 
scheme simultaneously. In this case, the none and local keywords act the same.

Related command: radius scheme, hwtacacs scheme.

# With 3com163.net as the current ISP domain, specify to adopt the RADIUS 
scheme named 3com.

[3Com-isp-3com163.net] scheme radius-scheme 3com 

# Specify the ISP domain named 3com to adopt the Scheme named rd, with Local 
authentication as the secondary authentication Scheme.

[3Com-isp-3com] scheme radius-scheme rd local 

# Specify the ISP domain named 3com to adopt hwtacacs-scheme hwtac 
Scheme, with Local authentication as the secondary authentication Scheme.

[3Com-isp-3com] scheme hwtacacs-scheme hwtac local 

System view

private-group-id: Specifies the way to represent the RADIUS attribute 
private-group-id.

mode: Specifies the way to represent the RADIUS attribute private-group-id.

standard: Specify to code the RADIUS attribute private-group-id according to 
RFC 2868.

Use the private-group-id mode standard command to configure VLAN 
delivering mode. A VLAN ID can be a string.