Huawei Quidway S5600 Series Operation Manual page 551

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S5600 Series Ethernet Switches-Release 1510
Authorize
access
type(s) of service(s)
Set the priority level of the
user
Set the attributes of the
user whose service type is
lan-access
Caution:
The character string of user-name cannot contain "/", ":", "*", "?", "<" and ">".
Moreover, "@" can be used no more than once.
After the local-user password-display-mode cipher-force command is executed,
all passwords will be displayed in cipher mode even through you specify to display
user passwords in plain text by using the password command.
If the configured authentication method (local or RADIUS) requires a user name and
a password, the command level that a user can access after login is determined by
the priority level of the user. For SSH users, when they use RSA shared keys for
authentication, the commands they can access are determined by the levels set on
their user interfaces.
If the configured authentication method is none or requires a password, the
command level that a user can access after login is determined by the level of the
user interface.
Operation
the user to
lan-access | { telnet |
the specified
ssh
[ level level ] }
level level
attribute
ip-address
mac-address | idle-cut
second | access-limit
max-user-number
vlan vlan-id | location
{
port
port port-number } }*
Huawei Technologies Proprietary
Chapter 1 AAA & RADIUS & HWTACACS
Command
service-type { ftp |
| terminal }*
{ ip
| mac
nas-ip ip-address
port-number
1-21
Description
Required
By default, the system does
not authorize the user to
access any service.
Optional
By default, the priority level
of the user is 0.
Optional
If the user is bound to a
remote port, you
specify the
parameter (the
|
ip-address is 127.0.0.1 by
default, representing
device). If the user is bound
|
to a local port, you do not
need to specify the nas-ip
parameter.
Configuration
must
nas-ip
following
this