3com S7906E Guide De Référence

 

1-13 

Use the undo authorization lan-access command to restore the default. 

By default, the default authorization scheme is used for LAN access users. 

Note that the RADIUS scheme specified for the current ISP domain must have been configured. 

Related commands: authorization default, radius scheme. 

# Configure the default ISP domain system to use the local authorization scheme for LAN access 

users. 

<Sysname> system-view 

[Sysname] domain system 

[Sysname-isp-system]authorization lan-access local 

# Configure the default ISP domain system to use RADIUS authorization scheme rd for LAN access 

users and to use the local authorization scheme as the backup scheme.  

<Sysname> system-view 

[Sysname] domain system 

[Sysname-isp-system] authorization lan-access radius-scheme rd local 

authorization login { hwtacacs-scheme  hwtacacs-scheme-name [ local ] |  local | none | 

radius-scheme radius-scheme-name [ local ] } 

ISP domain view 

2: System level 

hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, which is a 

string of 1 to 32 characters. 

local: Performs local authorization. 

none: Does not perform any authorization. In this case, an authenticated user is automatically 

authorized with the default right. 

radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1 

to 32 characters. 

Use the authorization login command to specify the authorization scheme for login users. 

Use the undo authorization login command to restore the default. 

By default, the default authorization scheme is used for login users.