2-10
Note that, when you log in to an Ethernet switch using the scheme authentication mode, your access
rights depend on your user level defined in the AAA scheme.
When the local authentication mode is used, the user levels are specified using the
authorization-attribute level level command.
When the RADIUS or HWTACACS authentication mode is used, the user levels are set on the
corresponding RADIUS or HWTACACS servers.
For more information about AAA, RADIUS, and HWTACACS, see AAA Configuration in the Security
Volume.
Configuration Example
Network requirements
Assume the switch is configured to allow you to login through Telnet, and your user level is set to the
administrator level (level 3). After you telnet to the switch, you need to limit the console user at the
following aspects.
z Configure the name of the local user to be “guest”.
z Set the authentication password of the local user to 123456 (in plain text).
z Set the service type of the local user to Terminal.
z Configure to authenticate the user logging in through the Console port in the scheme mode.
z The baud rate of the Console port is 19,200 bps.
z The screen can contain up to 30 lines.
z The history command buffer can store up to 20 commands.
z The timeout time of the AUX user interface is 6 minutes.
Figure 2-7 Network diagram for AUX user interface configuration (with the authentication mode being
scheme)
Configuration procedure
1) Configure the switch
# Enter system view.
<Sysname> system-view
To Next Page
Loading...
Need help?
General