37authorization pppUse authorization ppp to specify authorization methods for PPP users.Use undo authorization ppp to restore the default.SyntaxIn non-FIPS mode:authorization ppp { hwtacacs-scheme hwtacacs-scheme-name [ radius-schemeradius-scheme-name ] [ local ] [ none ] | local [ none ] | none | radius-schemeradius-scheme-name [ hwtacacs-scheme hwtacacs-scheme-name ] [ local ] [ none ] }undo authorization pppIn FIPS mode:authorization ppp { hwtacacs-scheme hwtacacs-scheme-name [ radius-schemeradius-scheme-name ] [ local ] | local | radius-scheme radius-scheme-name [ hwtacacs-schemehwtacacs-scheme-name ] [ local ] }undo authorization pppDefaultThe default authorization methods of the ISP domain are used for PPP users.ViewsISP domain viewPredefined user rolesnetwork-adminParametershwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, acase-insensitive string of 1 to 32 characters.local: Performs local authorization.none: Does not perform authorization.radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitivestring of 1 to 32 characters.Usage guidelinesYou can specify one primary authorization method and multiple backup authorization methods.When the primary method is invalid, the device attempts to use the backup methods in sequence.For example, the authorization ppp radius-scheme radius-scheme-name local none commandspecifies a primary RADIUS authorization method and two backup methods (local authorization andno authorization). The device performs RADIUS authorization by default and performs localauthorization when the RADIUS server is invalid. The device does not perform authorization whenboth of the previous methods are invalid.Examples# In ISP domain test, perform local authorization for PPP users. system-view[Sysname] domain test[Sysname-isp-test] authorization ppp local# In ISP domain test, perform RADIUS authorization for PPP users based on scheme rd and uselocal authorization as the backup. system-view
