H3C S7500 Series Operation Manual page 69

Operation Manual – Login
H3C S7500 Series Ethernet Switches
Enter system view
Configure
the
authentic
ation
scheme
Create a local user and
enter local user view
Set the authentication
password for the local
user
Specify the service type
for VTY users
Return to system view
Enter one or more VTY
user interface views
Configure to
authenticate users
locally or remotely
Configure the command
level available to users
logging into the user
interface
To do... Use the command...
system-view
Enter the
default ISP
domain domain-name
domain
view
Configure
the AAA scheme { local |
scheme to radius-scheme
be applied radius-scheme-name
to the
[ local ] | none }
domain
Return to
system quit
view
local-user user-name
password { simple |
cipher } password
service-type telnet
[ level level ]
user-interface vty
first-number
[ last-number ]
authentication-mode
scheme [ command-
authorization ]
user privilege level
level
Chapter 3 Logging in through Telnet
—
Optional
By default, the local AAA
scheme is applied. If you
specify to apply the local AAA
scheme, you need to perform
the configuration concerning
local user as well.
If you specify to apply an
existing scheme by providing
the radius-scheme-name
argument, you need to perform
the following configuration as
well:
No local user exists by default.
Required
Required
—
quit
—
Required
The specified AAA scheme
determines whether to
authenticate users locally or
remotely.
Users are authenticated locally
by default.
Optional
By default, commands of level
0 are available to users logging
into the VTY user interfaces.
3-10
Remarks
Perform AAA&RADIUS
configuration on the switch.
(Refer to
AAA&RADIUS&HWTACAC
S&EAD module for more.)
Configure the user name
and password accordingly
on the AAA server. (Refer
to the user manual of AAA
server.)
the