Configuring The Attributes Of A Local User - H3C S3100 Series Operation Manual

In string mode, if the VLAN ID assigned by the RADIUS server is a character string containing only
digits (for example, 1024), the switch first regards it as an integer VLAN ID: the switch transforms
the string to an integer value and judges if the value is in the valid VLAN ID range; if it is, the switch
adds the authenticated port to the VLAN with the integer value as the VLAN ID (VLAN 1024, for
example).
To implement dynamic VLAN assignment on a port where both MSTP and 802.1x are enabled, you
must set the MSTP port to an edge port.
This function is not supported on the S3100-C-EPON-EI Series Ethernet Switches.

Configuring the Attributes of a Local User

When local scheme is chosen as the AAA scheme, you should create local users on the switch and
configure the relevant attributes.
The local users are users set on the switch, with each user uniquely identified by a user name. To make
a user who is requesting network service pass local authentication, you should add an entry in the local
user database on the switch for the user.
Table 2-7 Configure the attributes of a local user
Operation
Enter system view
Set the password display
mode of all local users
Add a local user and
enter local user view
Set a password for the
local user
Set the status of the local
user
Authorize the user to
access specified type(s)
of service
Set the privilege level of
the user
Command
system-view
local-user
password-display-mode
{ cipher-force | auto }
local-user user-name
password { simple | cipher }
password
state { active | block }
service-type { ftp | lan-access
| { telnet | ssh | terminal }*
[ level level ] }
level level
2-9
Remarks
—
Optional
By default, the password display
mode of all access users is auto,
indicating the passwords of access
users are displayed in the modes set
by the password command.
Required
By default, there is no local user in the
system.
Required
Optional
By default, the user is in active state,
that is, the user is allowed to request
network services.
Required
By default, the system does not
authorize the user to access any
service.
Optional
By default, the privilege level of the
user is 0.