Authentication Default - H3C S7500E Series Command Manual

Command Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches

1.1.8 authentication default

Syntax
authentication default { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local |
none | radius-scheme radius-scheme-name [ local ] }
undo authentication default
View
ISP domain view
Parameters
hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its
name, which is a string of 1 to 32 characters.
local: Performs local authentication.
none: Does not perform any authentication.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which
is a string of 1 to 32 characters.
Description
Use the authentication default command to specify the default authentication scheme
for all types of users.
Use the undo authentication default command to restore the default.
By default, the authentication scheme is local.
Note that:
The RADIUS or HWTACACS scheme specified for the current ISP domain must
have been configured.
The authentication scheme specified with the authentication default command is
for all types of users and has a priority lower than that for a specific access mode.
Related commands: authorization default, accounting default, hwtacacs scheme,
radius scheme.
Examples
# Configure the default ISP domain system to use the local authentication scheme for
all types of users.
<Sysname> system-view
[Sysname] domain system
[Sysname-isp-system] authentication default local
# Configure the default ISP domain system to use RADIUS authentication scheme rd
for all types of users and to use the local authentication scheme as the backup scheme.
Chapter 1 AAA/RADIUS/HWTACACS
1-8
Configuration Commands