14-20
Configuring Scheme Authentication for Telnet Login
Configuration procedure
Follow these steps to perform Telnet configuration (with authentication mode scheme):
To do… Use the command… Remarks
Enter system view
system-view
—
Enter one or more VTY
user interface views
user-interface vty
first-number [ last-number ]
—
Enable scheme
authentication
authentication-mode
scheme
Required
The specified AAA scheme determines whether
to authenticate users locally or remotely.
Users are authenticated locally by default.
Quit to system view
quit
—
Enter the
default ISP
domain view
domain
domain name
Configure the
AAA scheme to
be applied to
the domain
authentication default
{
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] }
Configu
re the
authenti
cation
scheme
Quit to system
view
quit
Optional
By default, the local AAA scheme is applied. If
you specify to apply the local AAA scheme,
perform the configuration concerning local user
as well.
If you specify to apply an existing scheme by
providing the radius-scheme-name argument,
perform the following configuration as well:
z Perform AAA-RADIUS configuration on the
AP. (See AAA in the Security Configuration
Guide.)
z Configure the user name and password
accordingly on the AAA server. (See AAA in
the Security Configuration Guide.)
Create a local user and
enter local user view
local-user
user-name No local user exists by default.
Set the authentication
password for the local user
password
{
simple
|
cipher
}
password
Required
Specifies the level of the
VTY user
authorization-attribute
level
level
By default, the command level is 0.
Specify the service type for
VTY users
service-type telnet
Required
By default, a user is authorized with no service
z When you log in to an AP by using the scheme authentication mode, your access rights depend on
your user level defined in the AAA scheme.
z When the local scheme authentication mode is used, the user levels are specified by using the
authorization-attribute level level command.
z When the RADIUS scheme authentication mode is used, the user levels are set on the
corresponding RADIUS servers.
For more information about AAA and RADIUS, see AAA in the Security Configuration Guide.
To Next Page
Loading...
