Authorization Lan-Access - H3C S5510 Series Command Manual

Command Manual – AAA&RADIUS&HWTACACS
H3C S3610&S5510 Series Ethernet Switches
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system] undo authorization default

1.1.12 authorization lan-access

Syntax
authorization lan-access { radius-scheme radius-scheme-name [ local ] | local |
none }
undo authorization lan-access
View
ISP domain view
Parameter
radius-scheme-name: Name of RADIUS scheme, a string not exceeding 32 characters.
local: Local authorization.
none: Direct authorization. In this case, the user passes the authentication directly, but
only owns the default rights.
Description
Use the authorization lan-access command to configure authorization for a
lan-access user.
Use the undo authorization lan-access command to remove authorization for a
lan-access user.
Related command: authorization default.
Example
# In the default ISP domain named system, configure local as the authorization
scheme for the lan-access user.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
[Sysname-isp-system]authorization lan-access local
# In the default ISP domain named system, configure radius as the authorization
scheme named rd for the lan-access user and local as backup authorization. Note that
the rd scheme must be already configured. Related command: radius scheme.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain system
Chapter 1 AAA & RADIUS & HWTACACS
1-13
Configuration Commands