Filter
Top Products
1926 CHAPTER 127: AAA CONFIGURATION COMMANDS
Description Use the authorization command command to specify the authorization
scheme for command line users.
Use the
undo authorization command command to restore the default.
By default, the default authorization scheme is used for command line users.
Note that the HWTACACS scheme specified for the current ISP domain must have
been configured.
Related command: authorization default, hwtacacs scheme.
Example # Configure the default ISP domain system to use HWTACACS authorization
scheme hw for command line users.
<Sysname> system-view
[Sysname] domain system
[Sysname-isp-system] authorization command hwtacacs-scheme hw
authorization default
Syntax authorization default { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local |
none | radius-scheme radius-scheme-name [ local ]}
undo authorization default
View ISP domain view
Parameter hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by
its name, which is a string of 1 to 32 characters.
local: Performs local authorization.
none: Does not perform any authorization. In this case, an authenticated user is
automatically authorized with the default right.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name,
which is a string of 1 to 32 characters.
Description Use the
authorization default command to specify the authorization scheme
for all types of users.
Use the
undo authorization default command to restore the default.
By default, the authorization scheme for all types of users is local.
Note that:
■ The RADIUS or HWTACACS scheme specified for the current ISP domain must
have been configured.