HP 5830 Series Configuration Manual page 36

Step
3. Enable scheme
authentication.
4. Enable command
authorization.
5. Enable command
accounting.
6. Exit to system view.
Command
authentication-mode scheme
command authorization
command accounting
quit
29
Remarks
In non-FIPS mode, you can log in to
the device through the console port
without authentication by default.
In FIPS mode, scheme authentication
is enabled by default.
If local authentication is used and the
password control function is
enabled, change the password at
the first login. If NTP is being used
for system time synchronization, HP
recommends that you wait 10
minutes before changing the
password, so the configuration time
of the new password is based on the
synchronized system time.
Optional.
By default, command authorization
is disabled. The commands
available for a user only depend on
the user privilege level.
If command authorization is
enabled, a command is available
only if the user has the
commensurate user privilege level
and is authorized to use the
command by the AAA scheme.
Optional.
By default, command accounting is
disabled. The accounting server
does not record the commands
executed by users.
Command accounting allows the
HWTACACS server to record all
commands executed by users,
regardless of command execution
results. This function helps control
and monitor user behaviors on the
device. If command accounting is
enabled and command
authorization is not enabled, every
executed command is recorded on
the HWTACACS server. If both
command accounting and
command authorization are
enabled, only the authorized and
executed commands are recorded
on the HWTACACS server.
N/A