Authorization Default - H3C MSR 20-20 Command Reference Manual

1926 C 127: AAA C
HAPTER
Description
Related command:
Example

authorization default

Syntax
View
Parameter
Description
C
ONFIGURATION OMMANDS
Use the authorization command
scheme for command line users.
Use the
undo authorization command
By default, the default authorization scheme is used for command line users.
Note that the HWTACACS scheme specified for the current ISP domain must have
been configured.
authorization default, hwtacacs scheme.
# Configure the default ISP domain system to use HWTACACS authorization
scheme hw for command line users.
<Sysname> system-view
[Sysname] domain system
[Sysname-isp-system] authorization command hwtacacs-scheme hw
authorization default { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local |
none | radius-scheme radius-scheme-name [ local ] }
undo authorization default
ISP domain view
hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by
its name, which is a string of 1 to 32 characters.
local: Performs local authorization.
none: Does not perform any authorization. In this case, an authenticated user is
automatically authorized with the default right.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name,
which is a string of 1 to 32 characters.
Use the
authorization default
for all types of users.
Use the undo authorization default
By default, the authorization scheme for all types of users is local.
Note that:
The RADIUS or HWTACACS scheme specified for the current ISP domain must
■
have been configured.
command to specify the authorization
command to restore the default.
command to specify the authorization scheme
command to restore the default.