3Com WX3000 operation manual Local Authentication of FTP/Telnet Users

Local Authentication of FTP/Telnet Users

The configuration procedure for local authentication of FTP users is similar to that for Telnet users. The following text only takes Telnet users as example to describe the configuration procedure for local authentication.

Network requirements

In the network environment shown in Figure 2-2, you are required to configure the device so that the Telnet users logging into the switching engine are authenticated locally.

Figure 2-2Local authentication of Telnet users

Internet

Telnet user Switch

Configuration procedure

Method 1: Using local authentication scheme.

# Enter system view.

<device> system-view

# Adopt AAA authentication for Telnet users.

[device] user-interface vty 0 4

[device-ui-vty0-4] authentication-mode scheme

[device-ui-vty0-4] quit

# Create and configure a local user named "telnet".

[device] local-user telnet

[device-luser-telnet] service-type telnet

[device-luser-telnet] password simple aabbcc

[device-luser-telnet] quit

# Configure an authentication scheme for the default “system” domain.

[device] domain system

[device-isp-system] scheme local

A Telnet user logging into the device with the name telnet@system belongs to the "system" domain and will be authenticated according to the configuration of the "system" domain.

Method 2: using local RADIUS server

This method is similar to the remote authentication method described in Remote RADIUS Authentication of Telnet/SSH Users. However, you need to

2-28