Huawei Quidway S3900 Series Operation Manual page 69

Operation Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510
Note that if you configure to authenticate the users in the scheme mode, the command
level available to users logging into a switch depends on the authentication-mode
scheme [ command-authentication ] command, the user privilege level level
command, and the service-type { ftp | lan-access | { ssh | telnet | terminal }* [ level
level ] } command, as listed in Table 3-9.
Table 3-9 Determine the command level when users logging into switches are
authenticated in the scheme mode
Authenticati
on mode
Scheme
(authenticati
on-mode
scheme)
[ command-a
uthorization ]
Scenario
User type
The user privilege level level
command is not executed, and
the service-type command does
not
command level.
The user privilege level level
command is not executed, and
VTY users that
the
are
specifies the available command
AAA&RADIUS
level.
authenticated
The user privilege level level
or locally
command is executed, and the
authenticated
service-type command does not
specify the available command
level.
The user privilege level level
command is executed, and the
service-type command specifies
the available command level.
The user privilege level level
VTY users that
are command is not executed, and
authenticated the service-type command does
in the RSA not
mode of SSH command level.
The user privilege level level
command is not executed, and
the
specifies the available command
level.
The user privilege level level
command is executed, and the
service-type command does not
specify the available command
level.
Huawei Technologies Proprietary
3-12
Chapter 3 Logging in through Telnet
Command
specify the available
service-type command
specify the available
service-type command
Command
level
Level 0
Determined
by the
service-typ
e command
Level 0
Determined
by the
service-typ
e command
Level 0
Determined
by the user
privilege
level level
command