Authentication Default - H3C MSR 20-20 Command Reference Manual

1920 C 127: AAA C
HAPTER
Description
Related command:
Example

authentication default

Syntax
View
Parameter
C
ONFIGURATION OMMANDS
idle-cut minute: Configures the idle cut function. The idle cut period ranges from
1 to 120, in minutes.
ip ip-address: Specifies the IP address of the user. The attribute ip command only
applies to authentications that support IP address passing, such as 802.1x. If you
configure the command to authentications that do not support IP address passing,
such as MAC address authentication, the local authentication will fail.
location: Specifies the port binding attribute of the user.
nas-ip ip-address: Specifies the IP address of the port of the remote access server
bound by the user. The default is 127.0.0.1, that is, the device itself. This keyword
and argument combination is required only when the user is bound to a remote
port.
port slot-number subslot-number port-number: Specifies the port to which the
user is bound. The value of slot-number and subslot-number both range from 0 to
15. The value of port-number ranges from 0 to 255. The ports bounded are
determined by port number, regardless of port type.
mac mac-address: Specifies the MAC address of the user in the format of H-H-H.
vlan vlan-id: Specifies the VLAN to which the user belongs. The vlan-id argument
is in the range 1 to 4094.
Use the
attribute
Use the
undo attribute
The idle-cut command in user interface view applies to lan-access users only.
display local-user.
# Set the IP address of local user user1 to 10.110.50.1.
<Sysname> system-view
[Sysname] local-user user1
[Sysname-luser-user1] attribute ip 10.110.50.1
authentication default { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local |
none | radius-scheme radius-scheme-name [ local ] }
undo authentication default
ISP domain view
hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by
its name, which is a string of 1 to 32 characters.
local: Performs local authentication.
command to set some of the attributes for a LAN access user.
command to remove the configuration.