3com S7906E 参考指南
1-7
z
The attribute ip command for local users is applicable only to the authentication supporting IP
address upload, for example, 802.1X authentication. If this command is configured for the
authentication that does not support IP address upload, for example, MAC authentication, local
authentication may fail.
z
The idle-cut command in user interface view applies to LAN users only.
Related commands: display local-user.
Examples
# Set the IP address of local user user1 to 10.110.50.1.
<Sysname> system-view
[Sysname] local-user user1
[Sysname-luser-user1] attribute ip 10.110.50.1
authentication default
Syntax
authentication default { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local | none |
radius-scheme radius-scheme-name [ local ] }
undo authentication default
View
ISP domain view
Default Level
2: System level
Parameters
hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, which is a
string of 1 to 32 characters.
local: Performs local authentication.
none: Does not perform any authentication.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1
to 32 characters.
Description
Use the authentication default command to specify the default authentication scheme for all types of
users.
Use the undo authentication default command to restore the default.
By default, the authentication scheme is local.
Note that:
z
The RADIUS or HWTACACS scheme specified for the current ISP domain must have been
configured.
z
The authentication scheme specified with the authentication default command is for all types of
users and has a priority lower than that for a specific access mode.
Related commands: authorization default, accounting default, hwtacacs scheme, radius scheme.