Configuring Authentication Mode At Login - 3Com MSR 50 Series Configuration Manual

2162 C 120: U
HAPTER SER
Configuring
Authentication Mode
at Login
I C
NTERFACE ONFIGURATION
n
Execute the other redirect commands after using the redirect enable
■
command to enable redirection on the user interface.
You must set the same stop bits for the user interfaces corresponding to the
■
device that redirects Telnet connection and the device which is logged onto.
You can use the stopbit-error intolerance command to detect whether the
stop bits on the two ends are the same.
With the configuration of user interface authentication mode, you can decide
whether to authenticate users when they log on through the specified user
interface, thus enhancing the security of the device. The supported authentication
modes on the device are none, password, and scheme.
If you specify the authentication mode as none, then no username and
■
password are needed when users log on through the specified user interface,
which may be insecure.
If you specify the authentication mode as password, then password
■
authentication is needed when users log on through the specified user
interface (Console user interface exclusive). Input of empty or wrong password
may result in login failure. If no authentication password is set, when users
relog in through AUX, VTY and MODEM user interfaces, the system prompts
"Login password has not been set!" and the login fails; when users relog in
through other user interfaces such as the Console user interface, they can log
in without entering the password.
If you specify the authentication mode as scheme, then username and
■
password authentication is needed when users log on through the specified
user interface. Input of empty or wrong password may result in login failure.
Before terminating the redirected Telnet connection, set the username and
password. User authentication falls into local authentication and remote
authentication. If local authentication is adopted, you need to configure a local
user and the corresponding parameters as shown in the table for configuring
authentication mode at login as scheme; if remote authentication is adopted,
you need to configure username and password on the remote authentication
server. For the detailed description on the user authentication modes and
parameters, refer to
By default, the device performs local authentication on users.
Follow these steps to configure authentication mode at login as none:
To do...
Enter system view
Enter user interface
view
Set authentication
mode at login to none
Follow these steps to configure authentication mode at login as password:
"AAA/RADIUS/HWTACACS Configuration" on page
Use the command...
system-view
user-interface { first-num1
[ last-num1 ] | { aux | console |
tty | vty } first-num2
[ last-num2 ] }
authentication-mode none
Remarks
--
--
Required
By default, the authentication
mode is password for TTY, VTY,
and AUX user interfaces and is
none for Console interface.
1751.