Authentication Default - HP FlexNetwork MSR Series Command Reference Manual
Comware 7 security
Hide thumbs
Also See for FlexNetwork MSR Series:
- Configuration manual (392 pages) ,
- Configuration manuals (159 pages)
Advertisement
authentication default
Use authentication default to specify the default authentication method for an ISP domain.
Use undo authentication default to restore the default.
Syntax
In non-FIPS mode:
authentication
radius-scheme-name ] [ local ] [ none ] | ldap-scheme ldap-scheme-name [ local ] [ none ] | local
[
none
hwtacacs-scheme-name ] [ local ] [ none ] }
undo authentication default
In FIPS mode:
authentication
radius-scheme-name ] [ local ] | ldap-scheme ldap-scheme-name [ local ] | local | radius-scheme
radius-scheme-name [ hwtacacs-scheme hwtacacs-scheme-name ] [ local ] }
undo authentication default
Default
The default authentication method of an ISP domain is local.
Views
ISP domain view
Predefined user roles
network-admin
Parameters
hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, a
case-insensitive string of 1 to 32 characters.
ldap-scheme ldap-scheme-name: Specifies an LDAP scheme by its name, a case-insensitive string
of 1 to 32 characters.
local: Performs local authentication.
none: Does not perform authentication.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive
string of 1 to 32 characters.
Usage guidelines
The default authentication method is used for all users who support this method and do not have an
authentication method configured.
You can specify one primary default authentication method and multiple backup default
authentication methods.
When the primary method is invalid, the device attempts to use the backup methods in sequence.
For example, the authentication default radius-scheme radius-scheme-name local none
command specifies a primary default RADIUS authentication method and two backup methods
(local authentication and no authentication). The device performs RADIUS authentication by default
and performs local authentication when the RADIUS server is invalid. The device does not perform
authentication when both of the previous methods are invalid.
default
{
hwtacacs-scheme
]
|
none
|
radius-scheme
default
{
hwtacacs-scheme
hwtacacs-scheme-name
radius-scheme-name
hwtacacs-scheme-name
16
[
radius-scheme
[
hwtacacs-scheme
[
radius-scheme
Advertisement
