Configuring An Authentication Scheme - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
No.
1
2
3
4

1.3.2 Configuring an Authentication Scheme

Context
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
aaa
The AAA view is displayed.
Step 3 Run:
authentication-scheme authentication-scheme-name
An authentication scheme is created and the authentication scheme view is displayed.
By default, there is an authentication scheme named default on the S2700. This scheme can be
modified but cannot be deleted.
Step 4 Run:
Issue 01 (2011-07-15)
NOTE
By default, the local authentication mode is used.
If users are not authenticated, you must create an authentication scheme or modify the default authentication
scheme by setting the authentication mode to none. Then, you apply this authentication scheme to the
domain that users belong to.
You need to set the authentication modes for a user logging in to the S2700 and upgrading user levels
separately.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 AAA and User Management Configuration
Data
Name of the authentication scheme and
authentication mode
Name of the authorization scheme,
authorization mode, (optional) user level in
command-line-based authorization mode on
the HWTACACS server, and (optional)
timeout interval for command-line-based
authorization
Name of the accounting scheme and
accounting mode
(Optional) Name of the recording scheme,
name of the HWTACACS server template
associated with the recording scheme, and
recording policy used to record events
5