AAA Configuration Commands 323By default, an AAA scheme specifies to perform local authentications.The scheme command specifies a RADIUS/HWTACACS scheme for the current ISPdomain. The specified scheme must be an existing scheme.You can use the radius-scheme radius-scheme-name local or hwtacacs-schemehwtacacs-scheme-name local command to specify to perform localauthentications in case the Radius Server or the Tacacs Server fails to respondproperly. That is, local authentications are performed only when the Radius Serveror the Tacas Server fails.If you specify local authentications to be the primary scheme, then only localauthentications are performed and you cannot adopt RADIUS and HWTACACSscheme simultaneously. In this case, the none and local keywords act the same.Related command: radius scheme, hwtacacs scheme.Example# With 3com163.net as the current ISP domain, specify to adopt the RADIUSscheme named 3com.[3Com-isp-3com163.net] scheme radius-scheme 3com# Specify the ISP domain named 3com to adopt the Scheme named rd, with Localauthentication as the secondary authentication Scheme.[3Com-isp-3com] scheme radius-scheme rd local# Specify the ISP domain named 3com to adopt hwtacacs-scheme hwtacScheme, with Local authentication as the secondary authentication Scheme.[3Com-isp-3com] scheme hwtacacs-scheme hwtac localprivate-group-id modestandardSyntaxprivate-group-id mode standardundo private-group-id mode standardViewSystem viewParameterprivate-group-id: Specifies the way to represent the RADIUS attributeprivate-group-id.mode: Specifies the way to represent the RADIUS attribute private-group-id.standard: Specify to code the RADIUS attribute private-group-id according toRFC 2868.DescriptionUse the private-group-id mode standard command to configure VLANdelivering mode. A VLAN ID can be a string.
