Command Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
Huawei Technologies Proprietary
1-22
Note that:
z When the scheme command is used to specify the RADIUS scheme to be
referenced by current ISP domain, the specified RADIUS scheme must has
already been configured.
z If you execute the scheme radius-scheme radius-scheme-name local
command, the local scheme becomes the secondary scheme in case the
RADIUS server does not response normally. That is, if the communication
between the switch and the RADIUS server is normal, no local authentication is
performed; otherwise, local authentication is performed.
z If you execute the scheme hwtacacs-scheme hwtacacs-scheme-name local
command, the local scheme becomes the secondary scheme in case the
TACACS server does not response normally. That is, if the communication
between the switch and the TACACS server is normal, no local authentication is
performed; otherwise, local authentication is performed.
z If you execute the scheme local command, the local scheme is adopted as the
primary scheme. In this case, only local authentication is performed, no RADIUS
authentication is performed. If you execute the scheme none command, no
authentication is performed.
Related command: radius scheme.
Example
# Specify the RADIUS scheme radius1 as the primary AAA scheme referenced by the
ISP domain aabbcc.net and specify the local scheme as the secondary authentication
scheme.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] domain aabbcc.net
New Domain added.
[Quidway-isp-aabbcc.net] scheme radius-scheme raduis1 local
1.1.21 self-service-url
Syntax
self-service-url { disable | enable url-string }
undo self-service-url
View
ISP domain view