3Com 4210G Series Configuration Manual page 873

Follow these steps to configure user privilege level by using AAA authentication parameters:
To do...
Enter system view
Enter user interface view
Configure the authentication
mode for logging in to the user
interface as scheme
Exit to system view
Configure the authentication
mode for SSH users as
password
Using local
authentication
Configure the
user privilege
level by using
AAA
Using remote
authentication
authentication
parameters
(RADIUS,
HWTACACS,
and LDAP
authentication
s)
For the description of user interface, refer to Login Configuration in the System Volume; for the
description of the user-interface, authentication-mode and user privilege level commands,
refer to User Interface Commands in the System Volume.
For the introduction to AAA authentication, refer to AAA Configuration in the Security Volume; for
the description of the local-user and authorization-attribute commands, refer to AAA
Commands in the Security Volume.
For the introduction to SSH, refer to SSH 2.0 Configuration in the Security Volume.
2) Example of configuring user privilege level by using AAA authentication parameters
# Authenticate the users telnetting to the device through VTY 1, verify their usernames and passwords
locally, and specify the user privilege level as 3.
<Sysname> system-view
[Sysname] user-interface vty 1
[Sysname-ui-vty1] authentication-mode scheme
[Sysname-ui-vty1] quit
[Sysname] local-user test
Use the command...
system-view
user-interface [ type ]
first-number [ last-number ]
authentication-mode scheme
[ command-authorization ]
quit
For the details, refer to SSH2.0
Configuration in the Security
Volume.
Use the
local-user
command to create a local
user and enter local user
view.
Use the level keyword in
the authorization-attribute
command to configure the
user level.
Configure user level on the
authentication server
9-10
Remarks
—
—
Required
By default, the authentication
mode for VTY and AUX users
is password.
—
Required if users use SSH to
log in, and username and
password are needed at
authentication
User either approach
For local authentication, if
you do not configure the
user level, the user level is
0, that is, users of this level
can use commands with
level 0 only.
For remote authentication, if
you do not configure the
user level, the user level
depends on the default
configuration of
authentication server.
the