3com MSR 20-20 참조 매뉴얼

C

HAPTER

 127: AAA C

ONFIGURATION

 C

OMMANDS

Use the authorization command command to specify the authorization 
scheme for command line users.

Use the undo authorization command command to restore the default.

By default, the default authorization scheme is used for command line users.

Note that the HWTACACS scheme specified for the current ISP domain must have 
been configured.

authorization default, hwtacacs scheme.

# Configure the default ISP domain system to use HWTACACS authorization 
scheme hw for command line users.

<Sysname> system-view

[Sysname] domain system

[Sysname-isp-system] authorization command hwtacacs-scheme hw 

authorization default { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local | 
none | radius-scheme radius-scheme-name [ local ] }

ISP domain view

hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by 
its name, which is a string of 1 to 32 characters.

local: Performs local authorization.

none: Does not perform any authorization. In this case, an authenticated user is 
automatically authorized with the default right.

radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, 
which is a string of 1 to 32 characters.

Use the authorization default command to specify the authorization scheme 
for all types of users.

Use the undo authorization default command to restore the default.

By default, the authorization scheme for all types of users is local.

Note that:

■

The RADIUS or HWTACACS scheme specified for the current ISP domain must 
have been configured.