H3C S6812 Series Command Reference Manual page 1664

radius-scheme-name local none command specifies the default RADIUS authorization method and
two backup methods (local authorization and no authorization). The device performs RADIUS
authorization by default and performs local authorization when the RADIUS server is invalid. The
device does not perform authorization when both of the previous methods are invalid.
Examples
# In ISP domain test, perform local authorization for portal users.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization portal local
# In ISP domain test, perform RADIUS authorization for portal users based on scheme rd and use
local authorization as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization portal radius-scheme rd local
Related commands
authorization default
local-user
radius scheme
authorization-attribute (ISP domain view)
Use authorization-attribute to configure authorization attributes for users in an ISP domain.
Use undo authorization-attribute to restore the default of an authorization attribute.
Syntax
authorization-attribute { acl acl-number | car inbound cir committed-information-rate [ pir
peak-information-rate ] outbound cir committed-information-rate [ pir peak-information-rate ] | igmp
max-access-number max-access-number | ip-pool pool-name | ipv6-pool ipv6-pool-name | mld
max-access-number max-access-number | url url-string | user-group user-group-name |
user-profile profile-name }
undo authorization-attribute { acl | car | igmp | ip-pool | ipv6-pool | mld | url | user-group |
user-profile }
Default
An IPv4 user can concurrently join a maximum of four IGMP multicast groups.
An IPv6 user can concurrently join a maximum of four MLD multicast groups.
No other authorization attributes exist.
Views
ISP domain view
Predefined user roles
network-admin
Parameters
acl acl-number: Specifies an ACL to filter traffic for users. The value range for the acl-number
argument is 2000 to 5999. Typically, the attribute applies to authenticated users. If you configure the
attribute in a portal preauthentication domain, the ACL applies before portal authentication. This
option is applicable only to LAN and portal users.
23