Configuring A User Privilege Level - HP 5800 Series Configuration Manual

Level
1
2
3

Configuring a user privilege level

A user privilege level can be configured by using AAA authentication parameters or under a user interface.
Configuring user privilege level by using AAA authentication parameters
If the authentication mode of a user interface is scheme, the user privilege level of users logging into the user
interface is specified in AAA authentication configuration.
To configure the user privilege level by using AAA authentication parameters:
Step
Enter system view
Enter user interface view
Specify the scheme authentication
mode
Return to system view
Configure the authentication mode
for SSH users as password
Configure the
user privilege
level by using
AAA
authentication
Privilege Description
Involves commands for system maintenance and service fault diagnosis.
Commands at this level are not allowed to be saved after being configured. After
the switch is restarted, the commands at this level are restored to the default
Monitor
settings.
Commands at this level include debugging, terminal, refresh, reset, and send.
Involves service configuration commands, such as routing configuration
commands and commands for configuring services at different network levels.
System
By default, commands at this level include all configuration commands except for
those at the manage level.
Involves commands that influence the basic operation of the system and
commands for configuring system support modules.
By default, commands at this level involve the configuration commands of file
Manage
system, FTP, TFTP, Xmodem download, user management, level setting, and
parameter settings within a system (which are not defined by any protocols or
RFCs).
Command
system-view
user-interface { first-num1
[ last-num1 ] | { aux | vty }
first-num2 [ last-num2 ] }
authentication-mode scheme
quit
For more information about SSH,
see Security Configuration Guide.
•
Use local-user to create a local
user and enter local user view.
Using local
•
Use level keyword in the
authentication
authorization-attribute to
configure the user privilege
level.
Remarks
—
—
Required
By default, the authentication
mode for VTY users is password,
and no authentication is needed
for AUX login user.
—
Required if users use SSH to log in,
and username and password are
needed at authentication
Use either approach
•
15
For local authentication, if you
do not configure the user
privilege level, the user
privilege level is 0.