Operation Manual – AAA RADIUS HWTACACSH3C S5500-EI Series Ethernet SwitchesChapter 1 AAA/RADIUS/HWTACACSConfiguration1-17To do… Use the command… RemarksSpecify the defaultauthentication scheme forall types of usersauthentication default{ hwtacacs-schemehwtacacs-scheme-name[ local ] | local | none |radius-schemeradius-scheme-name[ local ] |Optionallocal by defaultSpecify the authenticationscheme for LAN accessusersauthenticationlan-access { local | none| radius-schemeradius-scheme-name[ local ] }OptionalThe default authenticationscheme is used bydefault.Specify the authenticationscheme for login usersauthentication login{ hwtacacs-schemehwtacacs-scheme-name[ local ] | local | none |radius-schemeradius-scheme-name[ local ] }OptionalThe default authenticationscheme is used bydefault.Note:z The authentication scheme specified with the authentication default command isfor all types of users and has a priority lower than that for a specific access mode.z With a RADIUS authentication scheme configured, AAA accepts only theauthentication result from the RADIUS server. The response from the RADIUSserver does include the authorization information when the authentication issuccessful, but the authentication process ignores the information.z With the radius-scheme radius-scheme-name local or hwtacacs-schemehwtacacs-scheme-name local keyword and argument combination configured, thelocal scheme is the backup scheme and is used only when the RADIUS server orTACACS server is not available.z If the primary authentication scheme is local or none, the system performs localauthentication or does not perform any authentication, rather than uses the RADIUSor HWTACACS scheme.1.3.5 Configuring an AAA Authorization Scheme for an ISP DomainIn AAA, authorization is a separate process at the same level as authentication andaccounting. Its responsibility is to send authorization requests to the specifiedauthorization server and to send authorization information to users authorized.Authorization scheme configuration is optional in AAA configuration.
