HP 6600 Security Configuration Manual page 76

[Router-GigabitEthernet3/0/1] quit
# Configure the IP address of GigabitEthernet 3/0/2, through which the router communicates with
the server.
[Router] interface gigabitethernet 3/0/2
[Router-GigabitEthernet3/0/2] ip address 10.1.1.2 255.255.255.0
[Router-GigabitEthernet3/0/2] quit
# Enable the router to provide Telnet service.
[Router] telnet server enable
# Configure the router to use AAA for Telnet users.
[Router] user-interface vty 0 4
[Router-ui-vty0-4] authentication-mode scheme
[Router-ui-vty0-4] quit
# Use RADIUS authentication for user privilege level switching authentication and, if RADIUS
authentication is not available, use local authentication.
[Router] super authentication-mode scheme local
# Create RADIUS scheme rad.
[Router] radius scheme rad
# Specify the IP address of the primary authentication server as 10.1.1.1, and the port for
authentication as 1812.
[Router-radius-rad] primary authentication 10.1.1.1 1812
# Set the shared key for secure authentication communication to expert.
[Router-radius-rad] key authentication expert
# Specify the service type of the RADIUS server as standard.
[Router-radius-rad] server-type standard
# Remove domain names from the usernames sent to the RADIUS server.
[Router-radius-rad] user-name-format without-domain
[Router-radius-rad] quit
# Create ISP domain bbb.
[Router] domain bbb
# Configure the AAA methods for domain bbb as local authentication.
[Router-isp-bbb] authentication login local
# Configure the domain to use the RADIUS scheme rad for user privilege level switching
authentication.
[Router-isp-bbb] authentication super radius-scheme rad
[Router-isp-bbb] quit
# Create a local Telnet user named test.
[Router] local-user test
[Router-luser-test] service-type telnet
[Router-luser-test] password simple aabbcc
# Configure the user level of the Telnet user to 0 after user login.
[Router-luser-test] authorization-attribute level 0
[Router-luser-test] quit
# Configure the password for local level switching authentication to 654321.
[Router] super password simple 654321
[Router] quit
62