Configuration Guide Basic Management
A secure encrypted password is used to control the switching between user levels. It has the same function as a simple
encrypted password but uses an enhanced password encryption algorithm. Therefore, secure encrypted passwords are
recommended out of security consideration.
Configuring Command Privilege Levels
Run the privilege command to assign a privilege level to a command.
A command at a lower level is accessible by more users than a command at a higher level.
Raising/Lowering a User Privilege Level
Run the enable command or the disable command to raise or lower a user privilege level respectively.
After logging in to a network device, the user can change his/her level to obtain access to commands at different
privilege levels.
Enabling Line Password Protection
Line password protection is required for remote login (such as login through Telnet).
Run the password[ 0 | 7 ] line command to configure a line password, and then run the login command to enable
password protection.
By default, terminals do not support the lock command.
2.3.2 Login Authentication Control
In login authentication with AAA disabled, the password entered by a user is checked against the configured line password. If
they are consistent, the user can access the network device. In local authentication, the username and password entered by
a user are checked against those stored in the local user database. If they are matched, the user can access the network
device with proper management permissions.
In AAA, the username and password entered by a user are authenticated by a server. If authentication is successful, the user
can access the network device and enjoy certain management permissions.
For example, a RADIUS server can be used to authenticate usernames and passwords and control users' management
permissions on network devices. Network devices no longer store users' passwords, but send encrypted user information to
the RADIUS server, including usernames, passwords, shared passwords, and access policies. This provides a convenient
way to manage and control user access and improve user information security.
Working Principle
Line Password
If AAA is disabled, you can configure a line password used to verify user identities during login. After AAA is enabled, line
password verification does not take effect.
Local Authentication
To Next Page
Loading...
Need help?
General
