HP 5830 series User Manual

14
For more information about user login authentication, see "Logging in to the CLI." For more information
about AAA and SSH, see Security Configuration Guide.
Configuring a user privilege level for users through the AAA module
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter user interface view.
user-interface { first-num1
[ last-num1 ] | { aux | vty }
first-num2 [ last-num2 ] }
N/A
3. Enable scheme
authentication.
authentication-mode scheme
By default, password
authentication is enabled for VTY
users, and authentication is
disabled for AUX users.
4. Return to system view.
quit N/A
5. Configure the authentication
mode for SSH users as
password.
For more information, see Security
Configuration Guide.
This task is required only for SSH
users who are required to provide
their usernames and passwords for
authentication.
6. Configure the user privilege
level through the AAA
module.
• To use local authentication:
a. Use the local-user
command to create a
local user and enter local
user view.
b. Use the level keyword in
the
authorization-attribute
command to configure the
user privilege level.
• To use remote authentication
(RADIUS or HWTACACS):
Configure the user privilege
level on the authentication
server
User either method.
For local authentication, if you do
not configure the user privilege
level, the user privilege level is 0.
For remote authentication, if you
do not configure the user privilege
level, the user privilege level
depends on the default
configuration of the authentication
server.
For more information about the
local-user and
authorization-attribute commands,
see Security Command Reference.
For example:
# Configure the device to use local authentication for Telnet users on VTY 1 and set the user privilege
level to 3.
<Sysname> system-view
[Sysname] user-interface vty 1
[Sysname-ui-vty1] authentication-mode scheme
[Sysname-ui-vty1] quit
[Sysname] local-user test
[Sysname-luser-test] password simple 123
[Sysname-luser-test] service-type telnet
When users Telnet to the device through VTY 1, they must enter username test and password 123 45678 .
After passing the authentication, the users can only use level-0 commands of level 0.
# Assign commands of levels 0 through 3 to the users.
[Sysname-luser-test] authorization-attribute level 3

HP 5830 series Specifications

General

Brand	HP
Model	5830 series
Category	Switch
Language	English