Operation Manual – AAA RADIUS HWTACACSH3C S7500E Series Ethernet SwitchesChapter 1 AAA/RADIUS/HWTACACSConfiguration1-18To do… Use the command… RemarksSpecify the authorizationscheme for LAN accessusersauthorizationlan-access { local | none| radius-schemeradius-scheme-name[ local ] }OptionalThe default authorizationscheme is used bydefault.Specify the authorizationscheme for login usersauthorization login{ hwtacacs-schemehwtacacs-scheme-name[ local ] | local | none |radius-schemeradius-scheme-name[ local ] }OptionalThe default authorizationscheme is used bydefault.Specify the authorizationscheme for Portal accessusersauthorization portal{ none | radius-schemeradius-scheme-name }OptionalThe default authorizationscheme is used bydefault.Note:z The authorization scheme specified with the authorization default command is forall types of users and has a priority lower than that for a specific access mode.z RADIUS authorization is special in that it takes effect only when the RADIUSauthorization scheme is the same as the RADIUS authentication scheme. Inaddition, if a RADIUS authorization fails, the error message returned to the NASsays that the server is not responding.z With the radius-scheme radius-scheme-name local or hwtacacs-schemehwtacacs-scheme-name local keyword and argument combination configured, thelocal scheme is the backup scheme and is used only when the RADIUS server orHWTACACS server is not available.z If the primary authentication scheme is local or none, the system performs localauthorization or does not perform any authorization, rather than uses the RADIUSor HWTACACS scheme.z Authorization information of the RADIUS server is sent to the RADIUS client alongwith the authorization response message; therefore, you cannot specify a separateRADIUS server. If you use RADIUS for authorization and authentication, you mustuse the same scheme setting for authorization and authentication; otherwise, thesystem will prompt you with an error message.1.3.6 Configuring an AAA Accounting Scheme for an ISP DomainIn AAA, accounting is a separate process at the same level as authentication andauthorization. Its responsibility is to send accounting start/update/end requests to the
