Authentication Ike - HP FlexNetwork MSR Series Command Reference Manual

Examples
# In ISP domain test, use RADIUS scheme rd as the primary default authentication method and use
local authentication as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authentication default radius-scheme rd local
Related commands
hwtacacs scheme
ldap scheme
local-user
radius scheme

authentication ike

Use authentication ike to configure the extended authentication method for IKE users.
Use undo authentication ike to restore the default.
Syntax
In non-FIPS mode:
authentication ike { local [ none ] | none | radius-scheme radius-scheme-name [ local ] [ none ] }
undo authentication ike
In FIPS mode:
authentication ike { local | radius-scheme radius-scheme-name [ local ] }
undo authentication ike
Default
The default authentication method for the ISP domain is used for IKE extended authentication.
Views
ISP domain view
Predefined user roles
network-admin
Parameters
local: Performs local authentication.
none: Does not perform authentication.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive
string of 1 to 32 characters.
Usage guidelines
You can specify one primary authentication method and multiple backup authentication methods.
When the primary method is invalid, the device attempts to use the backup methods in sequence.
For example, the authentication ike radius-scheme radius-scheme-name local none command
specifies a primary RADIUS authentication method and two backup methods (local authentication
and no authentication). The device performs RADIUS authentication by default and performs local
authentication when the RADIUS server is invalid. The device does not perform authentication when
both of the previous methods are invalid.
17