Operation Manual – AAA & RADIUS & HWTACACSH3C S3610&S5510 Series Ethernet SwitchesChapter 1 AAA & RADIUS & HWTACACS Configuration1-22Caution:z When charging a user, if the system does not find any available accounting serveror fails to communicate with any accounting server, it will not disconnect the user aslong as the accounting optional command has been executed.z The accounting scheme configured by the accounting default command isapplicable to all users. That is, the configuration takes effect for all users. But itspriority is lower than a specific access mode.z Local accounting is only used to manage the connections of local users. It has noreal statistics function. The management of local connections only has effect to localaccounting, not local authentication and authorization.z If the radius-scheme radius-scheme-name local or hwtacacs-schemehwtacacs-scheme-name local command is configured, the local is used as thealternative accounting when the RADIUS Server or TACACS server fails. That is,the local accounting is used only when the RADIUS Server or TACACS server doesnot work.z In the case of that local or none is used as the first solution for accounting, you canonly use the local accounting or no accounting. You cannot use RADIUS orHWTACACS solution simultaneously.z FTP does not support accounting for login.1.3.7 Configuring the Attributes of a Local UserWhen local scheme is chosen as the AAA scheme, you should create local users onthe switch and configure the relevant attributes.The local users are users set on the switch, with each user uniquely identified by a username. To make a user who is requesting network service pass through the localauthentication, you should add an entry in the local user database on the switch for theuser.Table 1-10 Configure the attributes of a local userOperation Command DescriptionEnter system view system-view —Set the password displaymode of all local userslocal-userpassword-display-mode { cipher-force |auto }OptionalBy default, the passworddisplay mode of all accessusers is auto, indicating thepasswords of access usersare displayed in the modesset with the passwordcommand.