3Com MSR 30, MSR 50 Authorization default, Related command authorization default, hwtacacs scheme

1926 CHAPTER 127: AAA CONFIGURATION COMMANDS

Description Use the authorization command command to specify the authorization scheme for command line users.

Use the undo authorization command command to restore the default.

By default, the default authorization scheme is used for command line users.

Note that the HWTACACS scheme specified for the current ISP domain must have been configured.

Related command: authorization default, hwtacacs scheme.

Example # Configure the default ISP domain system to use HWTACACS authorization scheme hw for command line users.

<Sysname> system-view

[Sysname] domain system

[Sysname-isp-system] authorization command hwtacacs-scheme hw

authorization default

Syntax authorization default { hwtacacs-scheme hwtacacs-scheme-name[ local ] local none radius-scheme radius-scheme-name[ local ] }

undo authorization default

View ISP domain view

Parameter hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, which is a string of 1 to 32 characters.

local: Performs local authorization.

none: Does not perform any authorization. In this case, an authenticated user is automatically authorized with the default right.

radius-schemeradius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1 to 32 characters.

Description Use the authorization default command to specify the authorization scheme for all types of users.

Use the undo authorization default command to restore the default.

By default, the authorization scheme for all types of users is local.

Note that:

■The RADIUS or HWTACACS scheme specified for the current ISP domain must have been configured.