HP 3100 v2 Series Configuration Manual page 20

Step
3. Specify the scheme
authentication mode.
4. Return to system view.
5. Configure the authentication
mode for SSH users as
password.
6. Configure the user privilege
level by using the AAA
module.
For example:
# Configure the device to use local authentication for Telnet users on VTY 1 and set the user
privilege level to 3.
<Sysname> system-view
[Sysname] user-interface vty 1
[Sysname-ui-vty1] authentication-mode scheme
[Sysname-ui-vty1] quit
[Sysname] local-user test
[Sysname-luser-test] password simple 123
[Sysname-luser-test] service-type telnet
When users Telnet to the device through VTY 1, they must enter username test and password
12345678. After passing the authentication, the users can only use level-0 commands of level 0.
# Assign commands of levels 0 through 3 to the users.
[Sysname-luser-test] authorization-attribute level 3
Configuring the user privilege level directly on a user interface
To configure the user privilege level directly on a user interface that uses the scheme authentication
mode:
Step
1. Configure the authentication
type for SSH users as
publickey.
2. Enter system view.
Command
authentication-mode scheme
quit
For more information, see
Security Configuration Guide.
•
To use local authentication:
a. Use the local-user
command to create a
local user and enter local
user view.
b. Use the level keyword in
the
authorization-attribute
command to configure
the user privilege level.
•
To use remote authentication
(RADIUS or HWTACACS):
Configure the user privilege
level on the authentication
server
Command
For more information, see
Security Configuration Guide.
system-view
14
Remarks
By default, the authentication
mode for VTY users is password,
and no authentication is needed
for AUX users.
N/A
This task is required only for SSH
users who are required to provide
their usernames and passwords
for authentication.
User either approach.
For local authentication, if you do
not configure the user privilege
level, the user privilege level is 0.
For remote authentication, if you
do not configure the user privilege
level, the user privilege level
depends on the default
configuration of the authentication
server.
For more information about the
local-user and
authorization-attribute
commands, see Security
Command Reference.
Remarks
Required only for SSH users who
use public-key authentication.
N/A