Configuring A Password Prompt Question For Resetting A Password - Zte ZXR10 ZSR V2 Configuration Manual (System Management

Chapter 4 User Management
Configuration Command
R1(config)#tacacs enable
R1(config)#tacacs-server host 10.1.1.1 key zte
R1(config)#tacplus group-server ztegroup
R1(config-sg)#server 10.1.1.1
R1(config-sg)#exit
R1(config)#aaa-authentication-template 2001
R1(config-aaa-authen-template)#aaa-authentication-type tacacs
R1(config-aaa-authen-template)#authentication-tacacs-group ztegroup
R1(config-aaa-authen-template)#exit
R1(config)#aaa-authorization-template 2001
R1(config-aaa-author-template)#aaa-authorization-type tacacs
R1(config-aaa-author-template)#authorization-tacacs-group ztegroup
R1(config-aaa-author-template)#exit
R1(config)#system-user
R1(config-system-user)#authentication-template 1
R1(config-system-user-authen-temp)#bind aaa-authentication-template 2001
R1(config-system-user-authen-temp)#exit
R1(config-system-user)#authorization-template 1
R1(config-system-user-author-temp)#bind aaa-authorization-template 2001
R1(config-system-user-author-temp)#local-privilege-level 15
R1(config-system-user-author-temp)#exit
R1(config-system-user)#user-name zte
R1(config-system-user-username)#bind authentication-template 1
R1(config-system-user-username)#bind authorization-templat 1
R1(config-system-user-username)#password zte
R1(config-system-user-username)#exit
R1(config-system-user)#exit
4.3.4 Configuring a Password Prompt Question for Resetting a
Password
Configuration Description
As shown in Figure 4-4, a user logs in to the ZXR10 ZSR V2 from a PC through a serial
port or Telnet. The user enters configuration mode to create an authentication user. Users
of any authentication mode can configure password recovery information, but password
recovery only takes effect for locally authenticated users.
4-11
SJ-20140504150128-007|2014-05-10 (R1.0) ZTE Proprietary and Confidential