H3C S3100-52P Operation Manual page 70

Operation Manual – Login
H3C S3100-52P Ethernet switch
Note that if you configure to authenticate the users in the scheme mode, the command
level available to the users logging in to the switch depends on the user privilege level
level command and the service-type { ftp | lan-access | { ssh | telnet | terminal }*
[ level level ] } command, as listed in
Table 3-4 Determine the command level when users logging in to switches are
authenticated in the scheme mode
Authenticati
on mode
authentication
-mode
scheme
[ command-a
uthorization ]
Table
Scenario
User type
The user privilege level level
command is not executed, and
the service-type command does
not specify the available
command level.
The user privilege level level
command is not executed, and
VTY users that
the service-type command
are
specifies the available command
AAA&RADIUS
level.
authenticated
The user privilege level level
or locally
command is executed, and the
authenticated
service-type command does not
specify the available command
level.
The user privilege level level
command is executed, and the
service-type command specifies
the available command level.
The user privilege level level
command is not executed, and
the service-type command does
not specify the available
command level.
The user privilege level level
command is not executed, and
the service-type command
VTY users that
specifies the available command
are
level.
authenticated
in the RSA
The user privilege level level
mode of SSH
command is executed, and the
service-type command does not
specify the available command
level.
The user privilege level level
command is executed, and the
service-type command specifies
the available command level.
3-11
Chapter 3 Logging In Through Telnet
3-4.
Command
Command
level
Level 0
Determined
by the
service-type
command
Level 0
Determined
by the
service-type
command
Level 0
Determined
by the user
privilege
level level
command