3Com 3C13636 Configuration Manual page 1013

3Com Router 3000 Ethernet Family
Configuration Guide
Accounting: The scheme can be RADIUS, HWTACACS, or none.
You can configure any combination of the above schemes for authentication,
authorization, and accounting of terminal users.
For FTP users
For FTP users, only authentication is supported.
The authentication scheme can be RADIUS, HWTACACS, local, RADIUS and local, or
HWTACACS-local.
For PPP and L2TP users
Authentication: The scheme can be RADIUS, HWTACACS, local, RADIUS and local,
HWTACACS and local, or none.
Authorization: The scheme can be HWTACACS or none.
Accounting: The supported scheme can be RADIUS, HWTACACS, or none.
You can configure any combination of the above schemes for authentication,
authorization, and accounting of PPP and L2TP users.
For portal services
Only RADIUS authentication and accounting are supported.
For DVPN services
Authentication and authorization: Only RADIUS, local, and RADIUS and local schemes
are supported.
Accounting: Only RADIUS scheme is supported.
Perform the following configuration in ISP domain view.
Table 2-6 Configure the related attributes of the ISP domain
Configure an authentication scheme for
the domain
Restore
scheme of the domain
Configure an authentication scheme for
the domain
Restore
scheme of the domain
Configure an accounting scheme for the
domain
Operation
the default authentication
the default authentication
3Com Corporation
Chapter 2 AAA and RADIUS/HWTACACS Protocol
authentication
radius-scheme-name
hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local
| none }
undo authentication
authorization
hwtacacs-scheme-name | none }
undo authorization
accounting
radius-scheme-name
hwtacacs-scheme
hwtacacs-scheme-name | none }
2-12
Configuration
Command
{ radius-scheme
[ local
{ hwtacacs-scheme
{ radius-scheme
] |
|