H3C S7500 Series Operation Manual page 71

Operation Manual – Login
H3C S7500 Series Ethernet Switches
Table 3-6 Determine the command level when users logging into switches are
authenticated in the scheme mode
Authenticati
on mode
Scheme
(authenticati
on-mode
scheme)
[ command-a
uthorization ]
Scenario
User type Command configuration
The user privilege level level
command is not executed, and the
service-type command does not
specify the available command level.
VTY users
The user privilege level level
that are
command is not executed, and the
AAA&RAD
service-type command specifies the
IUS
available command level.
authentica
The user privilege level level
ted or
command is executed, and the
locally
service-type command does not
authentica
specify the available command level.
ted
The user privilege level level
command is executed, and the
service-type command specifies the
available command level.
The user privilege level level
command is not executed, and the
service-type command does not
specify the available command level.
The user privilege level level
command is not executed, and the
VTY users
service-type command specifies the
that are
available command level.
authentica
ted in the
The user privilege level level
RSA mode
command is executed, and the
of SSH
service-type command does not
specify the available command level.
The user privilege level level
command is executed, and the
service-type command specifies the
available command level.
VTY users The user privilege level level
that are command is not executed, and the
authentica service-type command does not
ted in the specify the available command level.
password
The user privilege level level
mode of
command is not executed, and the
SSH
service-type command specifies the
available command level.
3-12
Chapter 3 Logging in through Telnet
Command
Level 0
Determined
by the
service-type
command
Level 0
Determined
by the
service-type
command
Level 0
Determined
by the user
privilege
level level
command
Level 0
Determined
by the
service-type
command
level