H3C S9500 Series Operation Manual page 36

Operation Manual – Getting Started
H3C S9500 Series Routing Switches
I. Configuring the authentication method
The following command is used for configuring the user login authentication method to
deny the access of an unauthorized user.
Perform the following configuration in user interface view.
Table 4-13 Configure the authentication method
Configure the authentication method
By default, terminal authentication is not required for local users log in via the Console
port. However, password authentication is required for local users and remote Modem
users to log in via the AUX port, and for Telnet users and the VTY users to log in
through Ethernet port.
Note: If the Console port is configured for local password authentication, the user can
directly log in to the system even without a password configured; if other user interfaces,
such as the AUX port and VTY interface, are configured for local password
authentication, users cannot log in to the system without a password.
1) Perform local password authentication to the user interface
Using authentication-mode password command, you can perform local password
authentication. That is, you need use the command below to configure a login
password in order to login successfully.
Perform the following configuration in user interface view.
Table 4-14 Configure the local authentication password
Configure
password
Remove
password
# Configure for password authentication when a user logs in through a VTY 0 user
interface and set the password to H3C.
[H3C] user-interface vty 0
[H3C-ui-vty0] authentication-mode password
[H3C-ui-vty0] set authentication password simple H3C
2) Perform local or remote authentication of username and password to the user
interface
Operation
Operation
the local authentication
the local authentication
Chapter 4 User Interface Configuration
authentication-mode { password |
scheme | none }
set authentication password { cipher |
simple }password
undo set authentication password
4-7
Command
Command