Authentication Ipoe - H3C MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

When the primary method is invalid, the device attempts to use the backup methods in sequence.
For example, the authentication ike radius-scheme radius-scheme-name local none command
specifies a primary RADIUS authentication method and two backup methods (local authentication
and no authentication). The device performs RADIUS authentication by default and performs local
authentication when the RADIUS server is invalid. The device does not perform authentication when
both of the previous methods are invalid.
Examples
# In ISP domain test, configure the device to perform local authentication through IKE extended
authentication.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authentication ike local
# In ISP domain test, perform IKE extended authentication based on RADIUS scheme rd and use
local authentication as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authentication ike radius-scheme rd local
Related commands
authentication default
local-user
radius scheme

authentication ipoe

Use authentication ipoe to specify authentication methods for IPoE users.
Use undo authentication ipoe to restore the default.
Syntax
In non-FIPS mode:
authentication ipoe { local [ none ] | none | radius-scheme radius-scheme-name [ local ]
[ none ] }
undo authentication ipoe
In FIPS mode:
authentication ipoe { local | radius-scheme radius-scheme-name [ local ] }
undo authentication ipoe
Default
The default authentication methods of the ISP domain are used for IPoE users.
Views
ISP domain view
Predefined user roles
network-admin
Parameters
local: Performs local authentication.
none: Does not perform authentication.
19

Advertisement

Table of Contents
loading

Table of Contents