R3204P16-HP Load Balancing Module Security Command Reference-6PW101

70
# Configure ISP domain test to use RADIUS authorization scheme rd for login users and use local
authorization as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authorization login radius-scheme rd local
authorization-attribute
Syntax
authorization-attribute { acl acl-number | callback-number callback-number | idle-cut minute | level
level | user-profile profile-name | vlan vlan-id | work-directory directory-name } *
undo authorization-attribute { acl | callback-number | idle-cut | level | user-profile | vlan |
work-directory } *
View
Local user view, user group view
Default level
3: Manage level
Parameters
acl: Specifies the authorization ACL of the local user(s).
acl-number: Authorization ACL for the local user(s), in the range 2000 to 5999.
callback-number: Specifies the authorization PPP callback number of the local user(s).
callback-number: Authorization PPP callback number for the local user(s), a case-sensitive string of 1 to
64 characters.
idle-cut: Specifies the idle cut function for the local user(s). With the idle cut function enabled, an online
user whose idle period exceeds the specified idle time will be logged out.
minute: Idle time allowed, in the range 1 to 120 minutes.
level: Specifies the level of the local user(s).
level: Level of the local user(s), which can be 0 for visit level, 1 for monitor level, 2 for system level, and
3 for manage level. A smaller number means a lower level. The default is 0.
user-profile: Specifies the authorization user profile of the local user(s).
profile-name: Name of the authorization user profile for the local user(s), a case-sensitive string of 1 to 32
characters. It can consist of English letters, digits, and underlines and must start with an English letter.
vlan: Specifies the authorized VLAN of the local user(s).
vlan-id: Authorized VLAN for the local user(s), in the range 1 to 4094.
work-directory: Specifies the authorized work directory of the local user(s), if the user or users are
authorized the FTP or SFTP service type.
directory-name: Authorized work directory, a case-insensitive string of 1 to 135 characters. This directory
must already exist.