Aaa Authentication-Scheme Ppp - 3Com 3C13618 Command Reference Manual

3Com Command Reference Guide — V1.00

2.1.4 aaa authentication-scheme ppp

Syntax
aaa authentication-scheme ppp { default | methods-list } { method1 } [ method2 ... ]
undo aaa authentication-scheme ppp { default | methods-list }
View
System view
Parameter
default: PPP default authentication method list name. This method list is used by
default if no authentication method is specified at the interface encapsulated with
PPP.
methods-list: Method list name input by the user. It needs to be used together with
the ppp authentication-mode command so that this methods-list can be used for
PPP authentication at a certain interface.
method: Authentication method, including the following three:
radius Authentication and accounting via the RADIUS server
local Local Authentication conducted and accounting via the RADIUS server
none
accounting.
Both radius and local authentication need to conduct accounting via the RADIUS
server. If accounting is unnecessary, you don't need to configure the accounting
server, and you can use the aaa accounting-scheme optional command to achieve
the authentication.
Multiple PPP authentication method lists can be configured for different interfaces.
When you are configuring the authentication method list, it is necessary to specify an
authentication method at least. When multiple authentication methods are specified,
method1 is used first during PPP authentication. If errors occur during the
authentication (like failing to set up communication with the RADIUS server),
method2 is used, and so on. If the authentication fails (resulting in illegal access)
after a certain method is used, the following methods are not used any more and the
authentication is terminated. In addition, it is meaningful only when the none method
is placed at the end.
The subsequent authentication method is used when the authentication can not
proceed normally instead of failing. Authentication unable to proceed normally means
10
All the users can access the network without any authentication. No