24CHAPTER 1: SYSTEM ACCESS

Configuring the Authentication Method The authentication-modecommand configures the user login authentication method that allows access to an unauthorized user. Table 11 describes the authentication-modecommand.

Perform the following configuration in user interface view.

Table 11 Configure Authentication Method

Operation

Command

 

 

Configure the authentication method

authentication-mode { password

 

scheme [ command-authorization ]

 

}

Configure no authentication

authentication-mode none

 

 

By default, terminal authentication is not required for users who log in through the console port, whereas a password is required for authenticating modem and Telnet users when they log in.

To configure authentication for modem and Telnet users:

1Configure local password authentication for the user interface.

When you set the password authentication mode, you must also configure a login

password to log in successfully. Table 12 describes the set authentication password command.

Perform the following configuration in user interface view.

Table 12 Configure the Local Authentication Password

Operation

Command

 

 

Configure the local authentication password

set authentication password {

 

cipher simple } password

Remove the local authentication password

undo set authentication password

 

 

Configure for password authentication when a user logs in through a VTY 0 user interface and set the password to 3Com:

[SW7750]user-interface vty 0

[SW7750-ui-vty0]authentication-mode password

[SW7750-ui-vty0]set authentication password simple 3Com

2Configure the local or remote authentication username and password.

Use the authentication-mode scheme command to perform local or remote authentication of username and password. The type of the authentication depends on your configuration. For detailed information, see “AAA and RADIUS Operation”

Perform username and password authentication when a user logs in through the VTY 0 user interface and set the username and password to zbr and 3Com respectively:

[SW7750-ui-vty0]authentication-mode scheme

[SW7750-ui-vty0]quit

[SW7750]local-user zbr

[SW7750-luser-zbr]service-type telnet

3Authorize users to use the command lines

The authentication-mode scheme command-authorization command indicates that you must be authorized to use the command lines on the TACACS

Page 24
Image 24
3Com 10014298 manual Perform the following configuration in user interface view, Authorize users to use the command lines