Table of Contents
Advertisement
Step
4.
Enter one or more VTY user
interface views.
5.
Enable scheme
authentication.
6.
Enable the user interfaces to
support Telnet, SSH, or both
of them.
7.
Enable command
authorization.
8.
Enable command
accounting.
9.
Exit to system view.
Command
user-interface vty first-number
[ last-number ]
authentication-mode scheme
protocol inbound { all | ssh |
telnet }
command authorization
command accounting
quit
38
Remarks
N/A
By default, password
authentication is enabled on VTY
user interfaces.
Optional.
By default, both Telnet and SSH
are supported.
The telnet keyword is not
supported in FIPS mode.
Optional.
By default, command
authorization is disabled. The
commands available for a user
only depend on the user privilege
level.
If command authorization is
enabled, a command is available
only if the user has the
commensurate user privilege
level and is authorized to use the
command by the AAA scheme.
Optional.
By default, command accounting
is disabled. The accounting
server does not record the
commands executed by users.
Command accounting allows the
HWTACACS server to record all
executed commands that are
supported by the device,
regardless of the command
execution result. This function
helps control and monitor user
behaviors on the device. If
command accounting is enabled
and command authorization is not
enabled, every executed
command is recorded on the
HWTACACS server. If both
command accounting and
command authorization are
enabled, only the authorized and
executed commands are
recorded on the HWTACACS
server.
N/A
Advertisement
Table of Contents
