HPE FlexNetwork 5510 HI Series Security Configuration Manual page 32

Local user configuration task list
Tasks at a glance
(Required.)
(Optional.) Configuring user group attributes
(Optional.) Displaying and maintaining local users and local user groups
Configuring local user attributes
When you configure local user attributes, follow these guidelines:
•
When you use the password-control enable command to globally enable the password
control feature, local user passwords are not displayed.
•
You can configure authorization attributes and password control attributes in local user view or
user group view. The setting in local user view takes precedence over the setting in user group
view.
•
Configure authorization attributes according to the application environments and purposes.
Support for authorization attributes depends on the service types of users.
For LAN and portal users, only the following authorization attributes are effective: acl,

user-profile, and vlan.
For HTTP and HTTPS users, only the authorization attribute user-role is effective.

For Telnet and terminal users, only the following authorization attributes are effective:

idle-cut and user-role.
For SSH users, only the following authorization attributes are effective: idle-cut, user-role,

and work-directory.
For FTP users, only the following authorization attributes are effective: user-role and

work-directory.
For other types of local users, no authorization attribute is effective.

•
Configure the location binding attribute based on the service types of users.
For 802.1X users, specify the 802.1X-enabled Layer 2 Ethernet interfaces through which

the users access the device.
For MAC authentication users, specify the MAC authentication-enabled Layer 2 Ethernet

interfaces through which the users access the device.
For portal users, specify the portal-enabled interfaces through which the users access the

device. Specify the Layer 2 Ethernet interfaces if portal is enabled on VLAN interfaces and
the portal roaming enable command is not configured.
To configure local user attributes:
Step
1. Enter system view.
2. Add a local user and enter
local user view.
3. (Optional.) Configure a
password for the local
user.
Configuring local user attributes
Command
system-view
local-user
{ manage | network } ]
•
•
user-name [ class
For a network access user:
password { cipher | simple }
password
For a device management
user:
In non-FIPS mode:

password [ { hash |
simple } password ]
In FIPS mode:

19
Remarks
N/A
By default, no local user exists.
Network access user passwords are
encrypted with the
algorithm and saved in ciphertext.
Device management
passwords are encrypted with the
hash algorithm and
ciphertext.
In non-FIPS mode,
non-password-protected
passes authentication if the user
encryption
user
saved in
a
user