HP 5120 series Configuration Manual page 56

To do...
Enter the default
ISP domain
view
Apply the
specified AAA
scheme to the
domain
Configure the
authentication
mode
Exit to system
view
Create a local user and enter local
user view
Set the local password
Specifies the command level of the
local user
Specify the service type for the
local user
Return to system view
Create an SSH user, and specify
the authentication mode for the
SSH user
Configure common settings for VTY
user interfaces
NOTE:
This chapter describes how to configure an SSH client by using password authentication. For more
information about SSH and how to configure an SSH client by using publickey, see the
Configuration Guide
.
After you enable command authorization or command accounting, you need to perform the following
configuration to make the function take effect:
Use the command...
domain domain-name
authentication default
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ] |
local | none | radius-scheme
radius-scheme-name [ local ] }
quit
local-user user-name
password { cipher | simple }
password
authorization-attribute level level
service-type ssh
quit
ssh user username service-type
stelnet authentication-type
{ password | { any |
password-publickey | publickey }
assign publickey keyname }
—
49
Remarks
Optional
By default, the AAA scheme is
local.
If you specify the local AAA
scheme, perform the configuration
concerning local user as well. If
you specify an existing scheme by
providing the radius-scheme-name
argument, perform the following
configuration as well:
•
For RADIUS and HWTACACS
configuration, see the Security
Configuration Guide.
•
Configure the username and
password on the AAA server.
(For more information, see the
Security Configuration Guide.)
Required
By default, no local user exists.
Required
By default, no local password is
set.
Optional
By default, the command level is 0.
Required
By default, no service type is
specified.
—
Required
By default, no SSH user exists, and
no authentication mode is
specified.
Optional
See "Configuring common settings
for VTY user interfaces (optional)."
Security