Configuration Example - HP 10500 Series Configuration Manual

Step
2. Enter user line view or
user line class view.
Enable scheme
3.
authentication.
4. Enable command
authorization.

Configuration example

Network requirements
As shown in
Configure the device to perform the following tasks:
Allow Host A to Telnet in after authentication.
•
• Use the HWTACACS server to control the commands that the user can execute.
If the HWTACACS server is not available, use local authorization.
•
Command
•
Enter user line view:
line { first-number1
[ last-number1 ] | { aux |
vty } first-number2
[ last-number2 ] }
•
Enter user line class view:
line class { aux | vty }
authentication-mode scheme
command authorization
Figure 20, Host A needs to log in to the device to manage the device.
Remarks
A setting in user line view is applied only to
the user line. A setting in user line class
view is applied to all user lines of the class.
A non-default setting in either view takes
precedence over a default setting in the
other view. A non-default setting in user
line view takes precedence over a
non-default setting in user line class view.
A setting in user line class view takes effect
only for users who log in after the
configuration is completed. It does not
affect online users.
By default, authentication is disabled for
the AUX line.
In VTY line view, this command is
associated with the protocol inbound
command. If you specify a non-default
value for only one of the two commands in
VTY line view, the other command uses the
default setting, regardless of the setting in
VTY line class view.
By default, command authorization is
disabled, and the commands available for
a user only depend on the user role.
If the command authorization command is
configured in user line class view,
command authorization is enabled on all
user lines in the class. You cannot
configure the undo command
authorization command in the view of a
user line in the class.
70