49
To do… Use the command…
Remarks
Configure the
authentication
mode
Enter the default
ISP domain
view
domain domain-name
Optional
By default, the AAA scheme is
local.
If you specify the local AAA
scheme, perform the configuration
concerning local user as well. If
you specify an existing scheme by
providing the radius-scheme-name
argument, perform the following
configuration as well:
• For RADIUS and HWTACACS
configuration, see the Security
Configuration Guide.
• Configure the username and
password on the AAA server.
(For more information, see the
Security Configuration Guide.)
Apply the
specified AAA
scheme to the
domain
authentication default
{ hwtacacs-scheme
hwtacacs-scheme-name [ local ] |
local | none | radius-scheme
radius-scheme-name [ local ] }
Exit to system
view
quit
Create a local user and enter local
user view
local-user user-name
Required
By default, no local user exists.
Set the local password
password { cipher | simple }
password
Required
By default, no local password is
set.
Specifies the command level of the
local user
authorization-attribute level level
Optional
By default, the command level is 0.
Specify the service type for the
local user
service-type ssh
Required
By default, no service type is
specified.
Return to system view quit —
Create an SSH user, and specify
the authentication mode for the
SSH user
ssh user username service-type
stelnet authentication-type
{ password | { any |
password-publickey | publickey }
assign publickey keyname }
Required
By default, no SSH user exists, and
no authentication mode is
specified.
Configure common settings for VTY
user interfaces
—
Optional
See "Configuring common settings
for VTY user interfaces (optional)."
NOTE:
This chapter describes how to configure an SSH client by using password authentication. For more
information about SSH and how to configure an SSH client by using publickey, see the
Security
Configuration Guide
.
After you enable command authorization or command accounting, you need to perform the following
configuration to make the function take effect: