HP 5800 Series Configuration Manual page 23

Step
parameters
Example of configuring a user privilege level by using AAA authentication parameters
# You are required to authenticate the users that Telnet to the switch through VTY 1, verify their username and
password, and specify the user privilege level as 3.
<Sysname> system-view
[Sysname] user-interface vty 1
[Sysname-ui-vty1] authentication-mode scheme
[Sysname-ui-vty1] quit
[Sysname] local-user test
[Sysname-luser-test] password cipher 12345678
[Sysname-luser-test] service-type telnet
When users Telnet to the switch through VTY 1, they must enter username test and password 12345678. After
passing the authentication, the users can only use the commands of level 0. If the users want to use
commands of levels 0, 1, 2 and 3, the following configuration is required:
[Sysname-luser-test] authorization-attribute level 3
Configuring the user privilege level under a user interface
If the authentication mode of a user interface is scheme, and SSH publickey authentication type (only a
•
username is needed for this authentication type) is adopted, the user privilege level of users logging
into the user interface is the user interface level.
If the authentication mode of a user interface is none or password, the user privilege level of users
•
logging into the user interface is the user interface level.
To configure the user privilege level under a user interface (SSH publickey authentication type):
Step
Configure the authentication type
for SSH users as publickey
Enter system view
Enter user interface view
Configure the authentication mode
for any user who uses the current
user interface to log in to the switch
Command
Using remote
authentication
(RADIUS, Configure the user privilege level
HWTACACS, on the authentication server
and LDAP
authentications)
Command
For more information about SSH,
see Security Configuration Guide.
system-view
user-interface { first-num1
[ last-num1 ] | vty first-num2
[ last-num2 ] }
authentication-mode scheme
Remarks
•
Remarks
Required if the SSH login mode is
adopted, and only username is
needed during authentication.
After the configuration, the
authentication mode of the
corresponding user interface must
be set to scheme.
—
—
Required
By default, the authentication
mode for VTY users is password,
and no authentication is needed
for AUX users.
16
For remote authentication, if
you do not configure the user
privilege level, the user
privilege level depends on the
default configuration of the
authentication server.