Configuring Authentication On A User Interface - HP FlexFabric 12900E series Installation Manual

Configuring authentication on a user interface

You can configure authentication on a user interface to control access to the switch.
Table 11 describes the Telnet login authentication methods available for a VTY user line.
Table 11 Telnet login authentication methods
Authentication
method
None
Password
Username and password
For more information about login methods, see HPE 12900E & 12900 Switch Series Fundamentals
Configuration Guide.
Configuring the basic access function
The switch without any configuration can perform basic data forwarding immediately after it is
connected to a network. To implement more forwarding features, configure the basic network
settings in Table 12
Table 12 Basic network settings
Setting
IP address
Static routes
VLANs
MSTP
Configuration example
Configuring Telnet service
# Enter system view.
<Sysname> system-view
# Enable the Telnet server.
[Sysname] telnet server enable
# Enter the view of user line VTY 0.
[Sysname] user-interface vty 0
# Enable password authentication on the user line.
[Sysname-line-vty0] authentication-mode password
# Set the password to hello in plaintext.
[Sysname-line-vty0] set authentication password simple hello
Feature
Easy to configure, allows any user to Telnet
to your switch, and lowest in security
Easy to configure, secure, and flat user
management
Complex to configure, secure, and
hierarchical user management
on the switch.
Description
Enables remote switch management, for example, by using Telnet.
Implement static routing.
Divide the LAN into multiple VLANs for data security.
Avoids loops in a dual-homed network.
59
Application scenarios
Lab environments and
extremely secure network
environments
Environments that do not need
granular privilege management
Environments where multiple
user roles cooperate to manage
the switch