HPE FlexNetwork 5510 HI Series Fundamentals Configuration Guide

54
b. The default ISP domain.
•
If you execute the quit command after obtaining user role authorization, you are logged out of
the device.
Table 11 User role authentication modes
Keywords Authentication mode Description
local
Local password
authentication only
(local-only)
The device uses the locally configured password for
authentication.
If no local password is configured for a user role in this
mode, an AUX user can obtain the user role authorization by
either entering a string or not entering anything.
scheme
Remote AAA authentication
through HWTACACS or
RADIUS (remote-only)
The device
sends the username and password to the
HWTACACS or RADIUS server for remote authentication.
To use this mode, you must perform the following
configuration tasks:
• Configure the required
HWTACACS or RADIUS
scheme, and configure the ISP domain
to use the
scheme for the user
. For more information, see
Security Configuration Guide.
• Add the user account and password
on the
HWTACACS or RADIUS server.
local
scheme
L
ocal password
authentication first, and then
remote AAA authentication
(local-then-remote)
Local password authentication is performed first.
If no local password is configured for the user role in this
mode:
• The device performs remote AAA authentication for
VTY users.
• An AUX user can obtain another user role by either
entering a string or not entering anything.
scheme
local
R
emote AAA authentication
first,
and then local
password authentication
(remote-then-local)
Remote AAA authentication is performed first.
Local password authentication is performed in either of the
following situations:
• The HWTACACS or RADIUS server does not respond.
• The remote AAA configuration on the device is invalid.
Configuring user role authentication
Step
Command
Remarks
1. Enter system view.
system-view
N/A
2. Set an
authentication
mode.
super authentication-mode
{
local
|
scheme
} *
By default, local-only authentication applies.
3.
(Optional.) Specify
the default target
user
role for
temporary user role
authorization.
super default role
rolename
By default, the default target user role is
network-admin.
4. Set a local
authentication
password for a user
role.
• In non-FIPS mode:
super password [ role
rolename ] [ { hash |
simple } password ]
• In FIPS mode:
Use this step for local password authentication.
By default, no password is configured.
If you do not specify the
role
rolename option,
the command sets a password for the default

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English