HP A5830 Series Configuration Manual page 54

Task...
b.
c.
11. Create a local user and enter
local user view.
Set the local password.
12.
Specify the command level of
13.
the local user.
14. Specify the service type for the
local user.
15. Return to system view
16. Create an SSH user, and specify
the authentication mode for the
SSH user.
17. Configure common settings for
VTY user interfaces
After enabling command authorization or command accounting, perform the following configuration to
make the function take effect:
Create a HWTACACS scheme, and specify the IP address of the authorization server and other
•
authorization parameters.
Reference the created HWTACACS scheme in the ISP domain.
•
For more information, see Security Configuration Guide.
When users adopt the scheme mode to log in to the device, the level of the commands that the users can
access depends on the user privilege level defined in the AAA scheme.
When the AAA scheme is local, the user privilege level is defined by the authorization-attribute
•
level level command.
When the AAA scheme is RADIUS or HWTACACS, the user privilege level is configured on the
•
RADIUS or HWTACACS server.
For more information about AAA, RADIUS, and HWTACACS, see Security Configuration Guide.
Command...
Apply the
authentication default
specified
{ hwtacacs-scheme hwtacacs-
AAA
scheme-name [ local ] | local
scheme
| none | radius-scheme
to the
radius-scheme-name [ local ] }
domain.
Exit to
system
quit
view.
local-user user-name
password { cipher | simple }
password
authorization-attribute level
level
service-type ssh
quit
ssh user username service-
type stelnet authentication-
type { password | { any |
password-publickey |
publickey } assign publickey
keyname }
—
47
Remarks
Required.
By default, no local user exists.
Required.
By default, no local password is set.
Optional.
By default, the command level is 0.
Required.
By default, no service type is
specified.
—
Required.
By default, no SSH user exists, and no
authentication mode is specified.
Optional
See "Configuring common settings for
VTY user interfaces (optional)."