3Com 4500 PWR 26-Port Configuration Manual page 676

To do...
C eate an SSH user, and r
specify an authentication type
for it
For password authentication type, the username argument must be consistent with the valid user
name defined in AAA; for publickey authentication, the username argument is the SSH local user
name, so that there is no need to configure a local user in AAA.
If the default authentication type for SSH users is password and local AAA authentication is
adopted, you need not use the ssh user command to create an SSH user. Instead, you can use
the local-user command to create a user name and its password and then set the service type of
the user to SSH.
If the default authentication type for SSH users is password and remote authentication (RADIUS
authentication, for example) is adopted, you need not use the ssh user command to create an
SSH user, because it is created on the remote server. And the user can use its username and
password configured on the remote server to access the network.
Under the publickey authentication mode, the level of commands available to
user can be configured using the user privilege level command on the server, and all the users
with this authentication mode will enjoy this level.
Under the password or password-publickey authenticatio
available to a logged-in SSH user is determined by the AAA scheme. Meanwhile, for different users,
the available levels of commands are also different.
Under the all authentication mode, the level of commands available to a logged-in SSH user is
determined by the actual
Spec ifying a Service Type for an SSH User on the Serve
At present, the swit
The secure Telnet servi
to provide remote login.
The SFT P service is an extend
perform remote FTP operations.
F ollow these steps to specify the service type for an SSH user:
To do...
Enter system view
Specify a service type for an
SSH user
Use the command...
ssh user username
authentication-type { all |
password | password-publickey
| publickey }
authentication method used for the user.
ch supp orts two servi ce types for SSH: stelnet (secu
ce is a basi c application of
ed application of SSH protocol.
Use the command...
system-view
ssh user username
service-type { stelnet | sftp |
all }
are used and different
authentication types are
specified, the authentication
type specified with the ssh
user authentication-type
command takes precedence.
n mode, the level of commands
r
re Telnet) and SFTP.
SSH protocol. It use s the secure channel of SSH
It u ses the secure channel of SSH t
—
Required
By default, an SSH user can
use the service type of stelnet.
Remarks
a logged-in SSH
o
Remarks