23authentication portalUse authentication portal to specify authentication methods for portal users.Use undo authentication portal to restore the default.SyntaxIn non-FIPS mode:authentication portal { ldap-scheme ldap-scheme-name [ local ] [ none ] | local [ none ] | none |radius-scheme radius-scheme-name [ local ] [ none ] }undo authentication portalIn FIPS mode:authentication portal { ldap-scheme ldap-scheme-name [ local ] | local | radius-schemeradius-scheme-name [ local ] }undo authentication portalDefaultThe default authentication methods of the ISP domain are used for portal users.ViewsISP domain viewPredefined user rolesnetwork-adminParametersldap-scheme ldap-scheme-name: Specifies an LDAP scheme by its name, a case-insensitive stringof 1 to 32 characters.local: Performs local authentication.none: Does not perform authentication.radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitivestring of 1 to 32 characters.Usage guidelinesYou can specify one primary authentication method and multiple backup authentication methods.When the primary method is invalid, the device attempts to use the backup methods in sequence.For example, the authentication portal radius-scheme radius-scheme-name local nonecommand specifies the default primary RADIUS authentication method and two backup methods(local authentication and no authentication). The device performs RADIUS authentication by defaultand performs local authentication when the RADIUS server is invalid. The device does not performauthentication when both of the previous methods are invalid.Examples# In ISP domain test, perform local authentication for portal users. system-view[Sysname] domain test[Sysname-isp-test] authentication portal local# In ISP domain test, perform RADIUS authentication for portal users based on scheme rd and uselocal authentication as the backup. system-view[Sysname] domain test
