HP 200 Unified Threat Management (UTM) Appliance manual

Page 30

Configuring password authentication for console login

Step

 

Command

Remarks

1.

Enter system view.

system-view

N/A

 

 

 

 

2.

Enter console user interface

user-interface console first-number

N/A

 

view.

[ last-number ]

 

 

 

 

 

 

3.

Enable password

 

By default, you can log in to the

authentication-mode password

device through the console port

 

authentication.

without authentication and have

 

 

 

 

 

user privilege level 3 after login.

 

 

 

 

4.

Set a password.

set authentication password

By default, no password is set.

{ cipher simple } password

 

 

 

 

 

 

 

5.

Configure common settings

See "Configuring common console

Optional.

 

for console login.

user interface settings (optional)."

 

 

 

 

 

 

The next time you attempt to log in through the console port, you must provide the configured login password.

Configuring scheme authentication for console login

When scheme authentication is used, you can choose to configure the command authorization and command accounting functions.

If command authorization is enabled, a command is available only if the user has the commensurate user privilege level and is authorized to use the command by the AAA scheme.

Command accounting allows the HWTACACS server to record all commands executed by users, regardless of command execution results. This function helps control and monitor user behaviors on the device. If command accounting is enabled and command authorization is not enabled, every executed command is recorded on the HWTACACS server. If both command accounting and command authorization are enabled, only the authorized and executed commands are recorded on the HWTACACS server.

Follow these guidelines when you configure scheme authentication for console login:

•To make the command authorization or command accounting function take effect, apply an HWTACACS scheme to the intended ISP domain. This scheme must specify the IP address of the authorization server and other authorization parameters.

•If the local authentication scheme is used, use the authorization-attribute level level command in local user view to set the user privilege level on the device.

•If a RADIUS or HWTACACS authentication scheme is used, set the user privilege level on the RADIUS or HWTACACS server.

To configure scheme authentication for console login:

Step

 

Command

Remarks

1.

Enter system view.

system-view

N/A

 

 

 

 

2.

Enter console user interface

user-interface console first-number

N/A

 

view.

[ last-number ]

 

 

 

 

 

 

 

 

24

 

Page 29 Page 31
Image 30
Page 29 Page 31
Contents HP Firewalls and UTM Devices Page Contents Page Iii Page Overview OverviewF1000-A-EI/F1000-S-EI AppearanceF1000-E Front viewF5000 Aspf Firewall modules Firewall module for 5800 switches Enhanced firewall modulesUTM products U200-A U200-A front viewU200-S Application scenariosF1000-A-EI/F1000-S-EI Firewall applicationVirtual firewall application VPN applicationF1000-E F5000 Firewall modulesEnhanced firewall modules Clound computing data center applicationRemote access application Enterprise network applicatoinUTM Network diagram Login methods Login overviewLogin methods at a glance Login method Default setting and configuration requirementsCLI user interfaces CLI login method and user interface matrixUser interface Login method User interface assignmentPage Logging in to the CLI Default console port propertiesParameter Default Logging in through the console port for the first timeConnection description Configuring console login control settings Setting the properties of the serial portCommand Remarks Configuring none authentication for console loginAuthentication Configuration tasks Reference Mode Last-numberConfiguring password authentication for console login Configuring scheme authentication for console loginDomain domain-name Configuration GuidePassword Hwtacacs-scheme-nameConfiguring common console user interface settings optional Speed speed-valueTelnet login Logging in through TelnetTelnet server and Telnet client configuration requirements Device role RequirementsConfiguring none authentication for Telnet login Configuring password authentication for Telnet login Telnetting to the device without authenticationConfiguring scheme authentication for Telnet login Password authentication interface for Telnet loginUser only depend on the user Configuring common VTY user interface settings optional Step Command RemarksCharacter Using the device to log in to a Telnet serverCommand ValueLogging in through SSH To use the device to log in to a Telnet serverConfiguring the SSH server on the device SSH server and client requirementsLdap-scheme-name Started Command Reference Local login through the AUX portUsing the device to log in to an SSH server Ssh2 serverHardware Feature compatible AUX login diagramConfiguring none authentication for AUX login Configuring password authentication for AUX login Configuring scheme authentication for AUX login Password authentication interface for AUX loginApply the specified AAA Configuring common settings for AUX login optional Ip alias ip-address port-numberDisplay type of both the device Login procedure Default AUX port propertiesConnecting the AUX port to a terminal Power on the device and press Enter at the prompt Include regular-expression Displaying and maintaining CLI loginTask Command Remarks Regular-expressionSend all num1 aux console Available in user view Vty num2 Configuration guidelines Logging in by using the default Web login settingsLogging in to the Web interface Adding a Web login account Configuring Web loginObject Requirements Configuring Http loginBasic Web login configuration requirements Web captcha verification-codeConfiguring Https login Interface interface-type Interface-numberVerification-code VPN Configuration Guide Policy-nameHttps Mask mask-lengthConfiguration procedure Displaying and maintaining Web loginHttp login configuration example Network requirementsHttps login configuration example Configure the host Https client # Associate the Https service with SSL server policy myssl# Enable the Https service # Create RSA local key pairsSymptom Troubleshooting Web browserFailure to access the device through the Web interface Configuring the Internet Explorer settingsInternet Explorer setting Configuring Firefox Web browser settings Click OK in the Security Settings dialog boxFirefox Web browser setting Configuring SNMPv3 access Accessing the device through SnmpConfiguring Snmp access PrerequisitesPriv-password acl acl-number acl ipv6 ipv6-acl-number Configuring SNMPv1 or SNMPv2c accessIpv6 ipv6-acl-number See Getting Started Command Reference Notify-view acl acl-number acl# Enable the Snmp agent Snmp login exampleStepCommand Remarks # Configure an Snmp groupPage Feature and hardware compatibility Logging in to the firewall module from the network deviceLogging in to the firewall module from the network device Resetting the system of the firewall module Configuring the Acsei protocolAcsei starts up and runs in the following procedures Acsei timersConfiguring Acsei server on the network device Acsei startup and runningNetwork requirements Configuring Acsei client on the firewall moduleDisplaying and maintaining Acsei server and client Client-id# Set the monitoring timer to 10 seconds Configuration procedure# Set the clock synchronization timer to 10 minutes # Log in to the firewall modulePage Basic configuration Performing basic configuration in the Web interfaceOverview Basic configuration wizard-1/6 Click Next For basic configuration appearsBasic configuration wizard-2/6 basic information Click Next For configuring service management appearsBasic configuration wizard-3/6 service management Another service Assign IP addresses to the interfacesConfiguration items Click Next For configuring NAT appearsConfigure the parameters as described in Table IP/Wildcard Performing basic configuration at the CLI Basic configuration wizard-6/6Ip address ip-address mask-length mask Global-nameInterface interface-type Zone name zone-name id zone-idConfiguration Managing the device Configuring the device name in the Web interfaceConfiguring the device name at the CLI Hardware Supported storage mediumConfiguring the system time in the Web interface Configuring the system timeDisplaying the current system time Configuring the network time CalendarConfiguring the time zone and daylight saving time Source InterfaceDate and time configuration example This example, Device a is the firewallConfiguring the local clock as the reference clock Configuring the system time at the CLI Configuration guidelinesZone-offset System time configuration resultsDate-time Date-time ± zone-offsetZone-offset + Summer-offset To change the system timeDate-time ± zone-offset + Both date-timeSetting the idle timeout timer in the Web interface Setting the idle timeout timer at the CLITo set the idle timeout timer Enabling displaying the copyright statement Configuring bannersTo enable displaying the copyright statement Banner message input modesConfiguring the maximum number of concurrent users To configure bannersConfiguring the exception handling method Rebooting the deviceRebooting the firewall in the Web interface Rebooting the firewall at the CLI Rebooting devices immediately at the CLIScheduling a device reboot Job configuration approaches Scheduling jobsComparison of non-modular and modular approaches Job job-name Scheduling a job in the non-modular approachScheduling a job in the modular approach View view-nameScheduled job configuration example Time time-id at time date command command# Create a job named pc1, and enter its view # Create a job named pc3, and enter its view Setting the port status detection timer# Create a job named pc2, and enter its view # Display information about scheduled jobsConfiguring advanced temperature thresholds Configuring temperature thresholds for a device or a moduleConfiguring basic temperature thresholds To set the port status detection timerMonitoring an NMS-connected interface Clearing unused 16-bit interface indexes Diagnosing transceiver modules Verifying and diagnosing transceiver modulesVerifying transceiver modules Interface-number beginCommand Reference Displaying and maintaining device managementSee Getting Started Task Command Remarks Task Command Remarks Configuring a local user in the Web interface Managing usersUser levels Configure a local user, as described in Table Click Apply Click AddConfiguration example Service type feature and hardware compatibilityItem Description Configuring a local user at the CLI Controlling user loginsConfiguring Telnet login control Vpn-instancevpn-instance-name Configuring source IP-based Telnet login controlSource sour-addr sour-wildcard Ipv6-address prefix-lengthTelnet login control configuration example Configuring source MAC-based Telnet login controlRule-string Configuring source IP-based Snmp login control Getting StartedRead-view write-viewwrite-view Snmp login control configuration exampleIpv6 ipv6-acl-number Group-name acl acl-number acl ipv6Configuring Web login control Configuring source IP-based Web login controlSource sour-addr sour-wildcard N/A any time-range Web login control configuration exampleLogging off online Web users User-id user-nameuser-nameDisplaying online users Field DescriptionCommand conventions Using the CLICommand conventions Convention DescriptionUsing the undo form of a command CLI viewsReturning to the upper-level view from any view Task CommandEntering system view from user view Returning to user view from any other viewAccessing the CLI online help Abbreviating commands Entering a commandEditing a command line Command line editing keysTo configure a command keyword alias Configuring and using command keyword aliasesConfiguring and using hotkeys Usage guidelinesEnabling redisplaying entered-but-not-submitted commands System-reserved hotkeysHotkey Function Common command-line error messages Understanding command-line error messagesUsing the command history function Error message CausePausing between screens of output Viewing history commandsSetting the command history buffer size for user interfaces Controlling the CLI outputFiltering the output from a display command Special characters supported in a regular expressionCharacter Meaning Examples String1string2string1string2 Contain stringstring. string1string2\2 repeatsString1string2string2. string1string2\1\2 Matches character1character2Configuring user privilege and command levels A being character2, but does not match 2aConfiguring a user privilege level Command levels and user privilege levelsLevel Privilege Default set of commands Management and Maintenance Last-num1 vty first-num2 Last-num2By default, the user privilege level Switching the user privilege level Privilege level switching authentication modes Authentication mode Keywords DescriptionInformation, see Access Control Configuration Guide Switching to a higher user privilege level Information required for user privilege level switchingTo change the level of a command Saving the running configurationChanging the level of a command View commandSupport and other resources Contacting HPRelated information Conventions Command conventionsSymbols GUI conventionsNetwork topology icons Port numbering in examplesIndex 144
Related manuals
Manual 3 pages 45.38 Kb
Top Page Image Contents