HP A7500 Series Configuration Manual page 55

To do...
Apply the
specified AAA
scheme to the
domain
Exit to system
view
Create a local user and enter local
user view
Set the local password
Specify the command level of the
local user
Specify the service type for the
local user
Return to system view
Create an SSH user, and specify
the authentication mode for the
SSH user
Configure common settings for VTY
user interfaces
NOTE:
This chapter describes how to configure an SSH client by using password authentication. For more
information about SSH and how to configure an SSH client by using publickey, see
Guide
.
After you enable command authorization or command accounting, you need to perform the following
configuration to make the function take effect:
Create a HWTACACS scheme, and specify the IP address of the authorization server and other
•
authorization parameters.
Reference the created HWTACACS scheme in the ISP domain.
•
For more information, see Security Configuration Guide.
When users adopt the scheme mode to log in to the device, the level of the commands that the users can
access depends on the user privilege level defined in the AAA scheme.
When the AAA scheme is local, the user privilege level is defined by the authorization-attribute
•
level level command.
Use the command...
authentication default
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ] }
quit
local-user user-name
password { cipher |
simple } password
authorization-attribute
level level
service-type ssh
quit
ssh user username
service-type stelnet
authentication-type
{ password | { any |
password-publickey |
publickey } assign
publickey keyname }
—
48
Remarks
Required
By default, no local user exists.
Required
By default, no local password is set.
Optional
By default, the command level is 0.
Required
By default, no service type is specified.
—
Required
By default, no SSH user exists, and no
authentication mode is specified.
Optional
See "Configuring common settings for VTY
user interfaces (optional)."
Security Configuration