HP 5120 EI Switch Series Configuration Manual page 48

no authentication as the backup method to be used when the remote server is not available. No
authentication can only be configured for LAN users as the backup method of remote authentication.
You can configure AAA authentication to work alone without authorization and accounting. By default,
an ISP domain uses the local authentication method.
Before configuring authentication methods, complete the following tasks:
 For RADIUS or HWTACACS authentication, configure the RADIUS or HWTACACS scheme to be
referenced first. The local and none authentication methods do not require any scheme.
 Determine the access mode or service type to be configured. With AAA, you can configure an
authentication method for each access mode and service type, limiting the authentication protocols
that can be used for access.
Determine whether to configure an authentication method for all access modes or service types.

Follow these steps to configure AAA authentication methods for an ISP domain:
To do...
Enter system view
Enter ISP domain view
Specify the default
authentication method for all
types of users
Specify the authentication
method for LAN users
Specify the authentication
method for login users
Specify the authentication
method for portal users
Specify the authentication
method for privilege level
switching
Use the command...
system-view
domain isp-name
authentication default { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local |
none | radius-scheme radius-scheme-name [
local ] }
authentication lan-access { local | none |
radius-scheme radius-scheme-name [ local |
none ] }
authentication login { hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local |
none | radius-scheme radius-scheme-name [
local ] }
authentication portal { local | none |
radius-scheme radius-scheme-name [ local ]
}
authentication super { hwtacacs-scheme
hwtacacs-scheme-name | radius-scheme
radius-scheme-name }
38
Remarks
—
—
Optional
local by default
Optional
The default authentication
method is used by default.
Optional
The default authentication
method is used by default.
Optional
The default authentication
method is used by default.
Optional
The default authentication
method is used by default.