H3C SR6600 Fundamentals Configuration Manual page 82

To do...
ation
Apply the
mode
specified AAA
scheme to the
domain
Return to
system view
Create a local user and
enter local user view
Set the authentication
password for the local user
Specifies the command
level of the local user
Specify the service type for
the local user
Configure common settings
for VTY user interfaces
After you enable command authorization, you need to perform the following configuration to make the
function take effect:
Create a HWTACACS scheme, and specify the IP address of the authorization server and other
authorization parameters. For more information, see AAA in the Security Configuration Guide.
Reference the created HWTACACS scheme in the ISP domain. For more information, see AAA in
the Security Configuration Guide.
After you enable command accounting, you need to perform the following configuration to make the
function take effect:
Create a HWTACACS scheme, and specify the IP address of the accounting server and other
accounting parameters. For more information, see AAA in the Security Configuration Guide.
Reference the created HWTACACS scheme in the ISP domain. For more information, see AAA in
the Security Configuration Guide.
When users adopt the scheme mode to log in to the device, the level of the commands that the users
can access depends on the user privilege level defined in the AAA scheme.
When the AAA scheme is local, the user privilege level is defined by the authorization-attribute
level level command.
When the AAA scheme is RADIUS or HWTACACS, the user privilege level is configured on the
RADIUS or HWTACACS server.
For more information about AAA, RADIUS, and HWTACACS, see AAA in the Security Configuration
Guide.
Use the command...
authentication default
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ] | local |
none | radius-scheme
radius-scheme-name [ local ] }
quit
local-user user-name
password { cipher | simple } password
authorization-attribute level level
service-type terminal
—
3-71
Remarks
If you specify the local AAA scheme,
perform the configuration
concerning local user as well. If you
specify an existing scheme by
providing the radius-scheme-name
argument, perform the following
configuration as well:
For RADIUS and HWTACACS
configuration, see AAA in the
Security Configuration Guide.
Configure the username and
password accordingly on the
AAA server. (For
information, see AAA in the
Security Configuration Guide.)
Required
By default, no local user exists.
Required
Optional
By default, the command level is 0.
Required
By default, no service type is
specified.
Optional
See Configuring Common Settings
for VTY User Interfaces (Optional).
more