HP A6600 Configuration Manual page 71

# Configure the router to use AAA for Telnet users.
[Router] user-interface vty 0 4
[Router-ui-vty0-4] authentication-mode scheme
[Router-ui-vty0-4] quit
# Use RADIUS authentication for user privilege level switching authentication and, if RADIUS
authentication is not available, use local authentication.
[Router] super authentication-mode scheme local
# Create RADIUS scheme rad.
[Router] radius scheme rad
# Specify the IP address of the primary authentication server as 10.1.1.1 and the port for authentication
as 1812.
[Router-radius-rad] primary authentication 10.1.1.1 1812
# Set the shared key for authenticating authentication packets to expert.
[Router-radius-rad] key authentication expert
# Specify the service type of the RADIUS server as standard.
[Router-radius-rad] server-type standard
# Specify the scheme to exclude the domain names from usernames to be sent to the RADIUS server.
[Router-radius-rad] user-name-format without-domain
[Router-radius-rad] quit
# Create ISP domain bbb.
[Router] domain bbb
# Configure the AAA methods for domain bbb as local authentication.
[Router-isp-bbb] authentication login local
# Configure the domain to use the RADIUS scheme rad for user privilege level switching authentication.
[Router-isp-bbb] authentication super radius-scheme rad
[Router-isp-bbb] quit
# Create a local Telnet user named test.
[Router] local-user test
[Router-luser-test] service-type telnet
[Router-luser-test] password simple aabbcc
# Configure the user level of the Telnet user to 0 after user login.
[Router-luser-test] authorization-attribute level 0
[Router-luser-test] quit
# Configure the password for local level switching authentication as 654321.
[Router] super password simple 654321
[Router] quit
Configure the RADIUS server.
2.
Add the usernames and passwords for user privilege level switching authentication, as shown in Table 7
and Figure 16.
59