Configuration Example - H3C S5100-SI Operation Manual

Refer to the AAA part of this manual for information about AAA, RADIUS, and HWTACACS.

Configuration Example

Network requirements
Assume current user logins through the console port and the user level is set to the administrator
level (level 3). Perform the following configurations for users logging in to VTY 0 using Telnet.
Configure the local user name as guest.
Set the authentication password of the local user to 123456 (in plain text).
Set the service type of VTY users to Telnet and the command level to 2.
Configure to authenticate users logging in to VTY 0 in scheme mode.
Only Telnet protocol is supported in VTY 0.
The screen can contain up to 30 lines.
The history command buffer can store up to 20 commands.
The timeout time of VTY 0 is 6 minutes.
Network diagram
Figure 3-3 Network diagram for Telnet configuration (with the authentication mode being scheme)
Configuration procedure
# Enter system view.
<Sysname> system-view
# Create a local user named guest and enter local user view.
[Sysname] local-user guest
# Set the authentication password of the local user to 123456 (in plain text).
[Sysname-luser-guest] password simple 123456
# Set the service type to Telnet, Specify commands of level 2 are available to users logging in to
VTY 0..
[Sysname-luser-guest] service-type telnet level 2
[Sysname-luser-guest] quit
# Enter VTY 0 user interface view.
[Sysname] user-interface vty 0
# Configure to authenticate users logging in to VTY 0 in the scheme mode.
[Sysname-ui-vty0] authentication-mode scheme
# Configure Telnet protocol is supported.
[Sysname-ui-vty0] protocol inbound telnet
3-8