Configuring User Role Authentication - HPE FlexNetwork 5510 HI Series Fundamentals Configuration Manual

b. The default ISP domain.
•
If you execute the quit command after obtaining user role authorization, you are logged out of
the device.
Table 11 User role authentication modes
Keywords
local
scheme
local
scheme
scheme
local

Configuring user role authentication

Step
1. Enter system view.
2. Set
authentication
mode.
3. (Optional.)
the default target
user
temporary user role
authorization.
4. Set
authentication
password for a user
role.
Authentication mode
Local password
authentication
(local-only)
Remote AAA authentication
through HWTACACS
RADIUS (remote-only)
Local password
authentication first, and then
remote AAA authentication
(local-then-remote)
Remote AAA authentication
first, and then
password authentication
(remote-then-local)
Command
system-view
an
super authentication-mode
{ local | scheme } *
Specify
role for
super default role rolename
•
In
a local
super password [ role
rolename ] [ { hash |
simple } password ]
•
In
Description
The device uses the locally configured password for
authentication.
only
If no local password is configured for a user role in this
mode, an AUX user can obtain the user role authorization by
either entering a string or not entering anything.
The device sends the username and password to the
HWTACACS or RADIUS server for remote authentication.
To use this mode, you must perform the following
configuration tasks:
•
Configure the required HWTACACS or RADIUS
or
scheme, and configure the ISP domain to use the
scheme for the user. For more information, see
Security Configuration Guide.
•
Add the user account and password on the
HWTACACS or RADIUS server.
Local password authentication is performed first.
If no local password is configured for the user role in this
mode:
•
The device performs remote AAA authentication for
VTY users.
•
An AUX user can obtain another user role by either
entering a string or not entering anything.
Remote AAA authentication is performed first.
Local password authentication is performed in either of the
local
following situations:
•
The HWTACACS or RADIUS server does not respond.
•
The remote AAA configuration on the device is invalid.
Remarks
N/A
By default, local-only authentication applies.
By default, the default target user role is
network-admin.
non-FIPS mode:
Use this step for local password authentication.
By default, no password is configured.
If you do not specify the role rolename option,
the command sets a password for the default
FIPS mode:
54