Configuring The Ftp/Telnet User Authentication At Local - Huawei Quidway S6500 Series Operation Manual

Operation Manual - Security
Quidway S6500 Series Ethernet Switches
[Quidway-radius-cams] quit
[Quidway] domain cams
[Quidway-isp-cams] scheme radius-scheme cams

2.5.2 Configuring the FTP/Telnet User Authentication at Local

Note:
Configuring local authentication for FTP users is similar to that for Telnet users. The
following example is based on Telnet users.
I. Networking requirements
Configure the router to authenticate the login Telnet users at the local (see the following
figure).
II. Networking diagram
telnet user telnet user
Figure 2-2 Local authentication for Telnet users
III. Configuration procedure
1) Method 1: Using Local scheme.
# Apply AAA authentication to Telnet users.
[Quidway-ui-vty0-4] authentication-mode scheme
# Create a local user telnet.
[Quidway] local-user telnet
[Quidway-luser-telnet] service-type telnet
[Quidway-luser-telnet] password simple huawei
[Quidway-luser-telnet] attribute idle-cut 300 access-limit 5
[Quidway] domain system
[Quidway-isp-system] scheme local
Telnet users use usernames in the "userid@system" format to log onto the network and
are to be authenticated as users of the system domain.
2) Method 2: Using the local authentication server.
Huawei Technologies Proprietary
2-29
Chapter 2 AAA and RADIUS Protocol
Internet Internet Internet Internet
Configuration