HP MSR Series Configuration Manual page 65

the RADIUS server for role authentication. The variable n represents a user role level. For more
information about user role authentication, see Fundamentals Configuration Guide.
Configuration procedure
To configure authentication methods for an ISP domain:
Step
1. Enter system view.
2. Enter ISP domain view.
3. Specify the default
authentication method for
all types of users.
4. Specify the authentication
method for ADVPN users.
5. Specify the authentication
method for IPoE users.
6. Specify the authentication
method for LAN users.
7. Specify the authentication
method for login users.
8. Specify the authentication
method for portal users.
9. Specify the authentication
method for PPP users.
Command
system-view
domain isp-name
authentication default { hwtacacs-scheme
hwtacacs-scheme-name [ radius-scheme
radius-scheme-name ] [ local ] [ none ] |
ldap-scheme ldap-scheme-name [ local ]
[ none ] | local [ none ] | none |
radius-scheme radius-scheme-name
[ hwtacacs-scheme
hwtacacs-scheme-name ] [ local ] [ none ] }
authentication advpn { local [ none ] | none
| radius-scheme radius-scheme-name
[ local ] [ none ] }
authentication ipoe { local [ none ] | none |
radius-scheme radius-scheme-name [ local ]
[ none ] }
authentication lan-access { ldap-scheme
ldap-scheme-name [ local ] [ none ] | local
[ none ] | none | radius-scheme
radius-scheme-name [ local ] [ none ] }
authentication login { hwtacacs-scheme
hwtacacs-scheme-name [ radius-scheme
radius-scheme-name ] [ local ] [ none ] |
ldap-scheme ldap-scheme-name [ local ]
[ none ] | local [ none ] | none |
radius-scheme radius-scheme-name
[ hwtacacs-scheme
hwtacacs-scheme-name ] [ local ] [ none ] }
authentication portal { ldap-scheme
ldap-scheme-name [ local ] [ none ] | local
[ none ] | none | radius-scheme
radius-scheme-name [ local ] [ none ] }
authentication ppp { hwtacacs-scheme
hwtacacs-scheme-name [ radius-scheme
radius-scheme-name ] [ local ] [ none ] | local
[ none ] | none | radius-scheme
radius-scheme-name [ hwtacacs-scheme
hwtacacs-scheme-name ] [ local ] [ none ] }
50
Remarks
N/A
N/A
By default, the default
authentication method is
local.
The none keyword is not
supported in FIPS mode.
By default, the default
authentication method is
used for ADVPN users.
The none keyword is not
supported in FIPS mode.
By default, the default
authentication method is
used for IPoE users.
The none keyword is not
supported in FIPS mode.
By default, the default
authentication method is
used for LAN users.
The none keyword is not
supported in FIPS mode.
By default, the default
authentication method is
used for login users.
The none keyword is not
supported in FIPS mode.
By default, the default
authentication method is
used for portal users.
The none keyword is not
supported in FIPS mode.
By default, the default
authentication method is
used for PPP users.
The none keyword is not
supported in FIPS mode.