Figure 14 Password authentication interface for Telnet login
Configuring scheme authentication for Telnet login
Follow these guidelines when you configure scheme authentication for Telnet login:
To make the command authorization or command accounting function take effect, apply an
•
HWTACACS scheme to the intended ISP domain. This scheme must specify the IP address of the
authorization server and other authorization parameters.
If the local authentication scheme is used, use the authorization-attribute level level command in
•
local user view to set the user privilege level on the device.
If a RADIUS or HWTACACS authentication scheme is used, set the user privilege level on the
•
RADIUS or HWTACACS server.
To configure scheme authentication for Telnet login:
Step
1.
Enter system view.
2.
Enable Telnet server.
3.
Enter one or multiple
VTY user interface views.
4.
Enable scheme
authentication.
Command
system-view
telnet server enable
user-interface vty first-number
[ last-number ]
authentication-mode scheme
36
Remarks
N/A
N/A
N/A
Whether local, RADIUS, or HWTACACS
authentication is adopted depends on the
configured AAA scheme.
By default, local authentication is adopted.