Chapter 1 Login Commands; Login Commands; Authentication-Mode - Huawei Quidway S3900 series Command Manual

Command Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510

1.1 Login Commands

1.1.1 authentication-mode

Syntax
authentication-mode { password | scheme [ command-authorization ] | none }
View
User interface view
Parameter
password: Authenticates users using the local password.
scheme: Authenticates users locally or remotely using usernames and passwords.
command-authorization:
authentication server.
none: Does not authenticate users.
Description
Use the authentication-mode command to specify the authentication mode.
If you specify the password keyword to authenticate users using the local
password, remember to set the local password using the set authentication
password { cipher | simple } password command.
If you specify the scheme keyword to authenticate users locally or remotely using
usernames and passwords, the actual authentication mode, that is, local or
remote, depends on other related configuration.
If this command is executed with the command-authorization keywords
specified, authorization is performed on the TACACS server whenever you
attempt to execute a command, and the command can be executed only when you
pass the authorization. Normally, a TACACS server contains a list of the
commands available to different users.
If you specify to perform local authentication when a user logs in through the Console
port, a user can log into the switch with the password not configured. But for a VTY user
interface, a password is needed for a user to log into the switch through it under the
same circumstance.
By default, users logging in through the Console port are not authenticated, whereas
modem users and Telnet users are authenticated.

Chapter 1 Login Commands

Performs
Huawei Technologies Proprietary
command authorization
1-1
Chapter 1 Login Commands
on TACACS