Zte ZXR10 8900 Series Command Manual page 28

ZXR10 8900 Series Command Manual (FW Volume)
Parameter
Description
12 Confidential and Proprietary Information of ZTE CORPORATION
Parameter
add
name
<string1>
protocol
local|radius|tacacs|s
ecurid|cert|ldap|do
main
timeout
<string2>
ip_address
<ipaddress>
Description
Adding authentication server.
This specifies the name of authentication
server.
This is the type of string, which is the name
of authentication server.
Tips:
1. Local authentication
types: OTP authentication and basic
authentication,
of OTP authentication server must
be set to otp and name of basic
authentication server must be set to
basic.
2. The name of certificate authentication
database must be set to cert.
3. OTP authentication server, basic auth
entication server and certificate auth
entication server are all built-in authe
ntication server. Only one server can
be configured for each type of built-in
authentication server.
This specifies used authentication protocol.
This specifies the type of protocol used for
authentication, including local authentication,
RADIUS authentication, TACACS
authentication, SecurID authentication,
certificate authentication, LDAP authentication
and domain authentication.
Tips:
As for certificate authentication, it needs to
import client root certificate and CRL file into
FW after adding built-in certificate server, or
client will fail to be authenticated.
This sets keep-alive timeout, which means
that user must re-log in authentication server
if keepalive packet fails to be received within
the specified time.
This is one digital string, in seconds.
This specifies IP address of authentication
server.
Tips:
This parameter must be set for authentications
of RADIUS type, TACACS type, SecurID type,
LDAP type and domain type; as for other
types of authentications, this parameter
doesn't need to be set.
This is one standard IP address string.
includes two
where the name