HP 6125XLG R2306-HP 6125XLG Blade Switch Security Command Reference - Page 16
authentication lan-access, Syntax, Default, Views, Predefined user roles, Parameters, Usage guidelines
View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 16 highlights
authentication lan-access Use authentication lan-access to configure the authentication method for LAN users. Use undo authentication lan-access to restore the default. Syntax In non-FIPS mode: authentication lan-access { local [ none ] | none | radius-scheme radius-scheme-name [ local ] [ none ] } undo authentication lan-access In FIPS mode: authentication lan-access { local | radius-scheme radius-scheme-name [ local ] } undo authentication lan-access Default The default authentication method for the ISP domain is used for LAN users. Views ISP domain view Predefined user roles network-admin Parameters local: Performs local authentication. none: Does not perform authentication. radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive string of 1 to 32 characters. Usage guidelines You can specify multiple authentication methods, one primary and multiple backup methods. When the primary method is invalid, the device attempts to use the backup methods in sequence. For example, the authentication lan-access radius-scheme radius-scheme-name local none command specifies a primary RADIUS authentication method and two backup authentication methods, local authentication and no authentication. With this command, the device performs RADIUS authentication by default, performs local authentication when the RADIUS server is invalid, and does not perform authentication when both of the previous methods are invalid. Examples # Configure ISP domain test to use local authentication for LAN users. system-view [Sysname] domain test [Sysname-isp-test] authentication lan-access local # Configure ISP domain test to use RADIUS authentication scheme rd for LAN users and use local authentication as the backup. system-view [Sysname] domain test [Sysname-isp-test] authentication lan-access radius-scheme rd local 7