Configuration Example - H3C S5100-SI Operation Manual

To do...
Enter the
default ISP
domain view
Specify the AAA
scheme to be
applied to the
domain
Configure
the
authenticati
on mode
Quit to system
view
Create a local user (Enter local
user view.)
Set the authentication
password for the local user
Specify the service type for
AUX users
Note that:
If you configure to authenticate the users in the scheme mode, the command level available to users
logging in to a switch depends on the command level specified in the AAA scheme:
When the AAA scheme is local authentication, the command level available to users depends on
the service-type terminal [ level level ] command.
When the AAA scheme is RADIUS or HWTACACS authentication, you need to set the
corresponding user level on the RADIUS or HWTACACS server.
For the introduction to AAA, RADIUS, and HWTACACS, refer to the AAA part of this manual.

Configuration Example

Network requirements
Assume the switch is configured to allow users to log in through Telnet, and the user level is set to
the administrator level (level 3). Perform the following configurations for users logging in through
the console port (AUX user interface).
Configure the local user name as guest.
Use the command...
domain domain-name
scheme { local | none |
radius-scheme
radius-scheme-name [ local ]
| hwtacacs-scheme
hwtacacs-scheme-name
[ local ] }
quit
local-user user-name
password { simple | cipher }
password
service-type terminal [ level
level ]
2-11
Remarks
Optional
By default, the local AAA scheme
is applied.
If you specify to apply the local
AAA scheme, you need to
perform the configuration
concerning local user as well.
If you specify to apply a RADIUS
or HWTACACS scheme, you
need to perform the following
configuration as well:
Perform RADIUS
HWTACACS configuration on
the switch. (Refer to the AAA
part for more.)
Configure the user name and
password accordingly on the
AAA server. (Refer to the user
manual of AAA server.)
Required
No local user exists by default.
Required
Required
and