HPE FlexNetwork MSR Series Comware 5 Security Configuration Manual page 62

Configuration procedure
To configure authorization methods for an ISP domain:
Step
1. Enter system view.
2. Enter ISP domain view.
3. Specify the default
authorization method for
all types of users.
4. Specify the command
authorization method.
5. Specify the authorization
method for DVPN users.
6. Specify the authorization
method for LAN users.
7. Specify the authorization
method for login users.
Command
system-view
domain isp-name
•
In non-FIPS mode:
authorization default
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ] |
local | none | radius-scheme
radius-scheme-name [ local ] }
•
In FIPS mode:
authorization default
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ] |
local | radius-scheme
radius-scheme-name [ local ] }
•
In non-FIPS mode:
authorization command
{ hwtacacs-scheme
hwtacacs-scheme-name [ local |
none ] | local | none }
•
In FIPS mode:
authorization command
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ] |
local }
•
In non-FIPS mode:
authorization dvpn { local | none |
radius-scheme
radius-scheme-name [ local ] }
•
In FIPS mode:
authorization dvpn { local |
radius-scheme
radius-scheme-name [ local ] }
•
In non-FIPS mode:
authorization lan-access { local |
none | radius-scheme
radius-scheme-name [ local |
none ] }
•
In FIPS mode:
authorization lan-access { local |
radius-scheme
radius-scheme-name [ local ] }
•
In non-FIPS mode:
authorization login
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ] |
local | none | radius-scheme
radius-scheme-name [ local ] }
•
In FIPS mode:
authorization login
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ] |
local | radius-scheme
radius-scheme-name [ local ] }
49
Remarks
N/A
N/A
Optional.
The default authorization
method is local for all types
of users.
Optional.
The default authorization
method is used by default.
Optional.
The default authorization
method is used by default.
Optional.
The default authorization
method is used by default.
Optional.
The default authorization
method is used by default.