H3C S3100 Series Command Manual page 425

Command Manual (For Soliton) – AAA
H3C S3100 Series Ethernet Switches
Examples
# Configure the ISP domain "aabbcc.net" to use the RADIUS scheme "extended".
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] domain aabbcc.net
New Domain added.
[Sysname-isp-aabbcc.net] radius-scheme extended
1.1.23 scheme
Syntax
scheme { local | none | radius-scheme radius-scheme-name [ local ] |
hwtacacs-scheme hwtacacs-scheme-name [ local ] }
undo scheme [ none | radius-scheme | hwtacacs-scheme ]
View
ISP domain view
Parameters
radius-scheme-name: Name of a RADIUS scheme, a string of up to 32 characters.
hwtacacs-scheme-name: Name of a HWTACACS scheme, a string of up to 32
characters.
local: Specifies to use local authentication.
none: Specifies not to perform authentication.
Description
Use the scheme command to configure an AAA scheme for current ISP domain.
Use the undo scheme command to restore the default AAA scheme configuration for
the ISP domain.
By default, the ISP domain uses the local AAA scheme.
Note that:
When you execute the scheme command to reference a RADIUS scheme in
current ISP domain, the referenced RADIUS scheme must already exist.
If you execute the scheme radius-scheme radius-scheme-name local command,
the local scheme is used as the secondary scheme in case no RADIUS server is
available. That is, if the communication between the switch and a RADIUS server
is normal, no local authentication is performed; otherwise, local authentication is
performed.
Chapter 1 AAA Configuration Commands
1-25