H3C S3600 Series

Operation Manual – AAA-RADIUS-HWTACACS-EAD
H3C S3600 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-44
A Telnet user logging into the switch by a name in the format of userid @cams belongs
to the cams domain and will be authenticated according to the configuration of the
cams domain.
1.7.2 Local Authentication of FTP/Telnet Users
 Note:
The configuration procedure for local authentication of FTP users is similar to that for
Telnet users. The following text only takes Telnet users as example to describe the
configuration procedure for local authentication.
I. Network requirements
In the network environment shown in Figure 1-8, you are required to configure the
switch so that the Telnet users logging into the switch are authenticated locally.
II. Network diagram
Internet
Telnet user
Internet
Internet
Internet
Telnet user
Internet
Internet
Figure 1-8 Local authentication of Telnet users
III. Configuration procedure
Method 1: Using local authentication scheme.
# Enter system view.
<H3C> system-view
[H3C]
# Adopt AAA authentication for Telnet users.
[H3C] user-interface vty 0 4
[H3C-ui-vty0-4] authentication-mode scheme
[H3C-ui-vty0-4] quit
# Create and configure a local user named "telnet".
[H3C] local-user telnet
[H3C-luser-telnet] service-type telnet
[H3C-luser-telnet] password simple h3c
[H3C-luser-telnet] attribute idle-cut 300 access-limit 5