HP MSR2000/3000/4000 Router Series Security Command Reference

12
Use undo authentication ppp to restore the default.
Syntax
In non-FIPS mode:
authentication ppp { local [ none ] | none | radius-scheme radius-scheme-name [ local ] [ none ] }
undo authentication ppp
In FIPS mode:
authentication ppp { local | radius-scheme radius-scheme-name [ local ] }
undo authentication ppp
Default
The default authentication method for the ISP domain is used for PPP users.
Views
ISP domain view
Predefined user roles
network-admin
Parameters
local: Performs local authentication.
none: Does not perform authentication.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive string of
1 to 32 characters.
Usage guidelines
You can specify multiple authentication methods, one primary and multiple backup methods. When the
primary method is invalid, the device attempts to use the backup methods in sequence. For example, the
authentication ppp radius-scheme radius-scheme-name local none command specifies a primary
RADIUS authentication method and two backup authentication methods, local authentication and no
authentication. With this command, the device performs RADIUS authentication by default, performs
local authentication when the RADIUS server is invalid, and does not perform authentication when both
of the previous methods are invalid.
Examples
# Configure ISP domain test to use local authentication for PPP users.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authentication ppp local
# Configure ISP domain test to use RADIUS authentication scheme rd for PPP users and use local
authentication as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] authentication ppp radius-scheme rd local
Related commands
• authentication default
• local-user