Specifying A Service Type For An Ssh User - H3C S3100-52P Operation Manual

Operation Manual – SSH
H3C S3100-52P Ethernet Switch
Caution:
For password authentication type, the username argument must be consistent with
the valid user name defined in AAA; for publickey authentication, the username
argument is the SSH local user name, so that there is no need to configure a local
user in AAA.
If the default authentication type for SSH users is password and local AAA
authentication is adopted, you need not use the ssh user command to create an
SSH user. Instead, you can use the local-user command to create a user name
and its password and then set the service type of the user to SSH.
If the default authentication type for SSH users is password and remote
authentication (RADIUS authentication, for example) is adopted, you need not use
the ssh user command to create an SSH user, because it is created on the remote
server. And the user can use its username and password configured on the remote
server to access the network.
Under the publickey authentication mode, the level of commands available to a
logged-in SSH user can be configured using the user privilege level command on
the server, and all the users with this authentication mode will enjoy this level.
Under the password or password-publickey authentication mode, the level of
commands available to a logged-in SSH user is determined by the AAA scheme.
Meanwhile, for different users, the available levels of commands are also different.
Under the all authentication mode, the level of commands available to a logged-in
SSH user is determined by the actual authentication method used for the user.

1.3.6 Specifying a Service Type for an SSH User

Table 1-7 Follow these steps to specify the service type for an SSH user:
Enter system view
Specify a service type for
an SSH user
To do...
system-view
ssh user username
service-type { stelnet |
sftp | all }
Use the command...
1-11
Chapter 1 SSH Configuration
Remarks
—
Required
By default, an SSH user
can use the service type
of stelnet.