HP 8800 Router manual 140

Step		Command	Remarks
5.	Configure the	For more information, see System	This task is required only for SSH users
	authentication mode		who are required to provide their
		Management and Maintenance
	for SSH users as		usernames and passwords for
		Configuration Guide.
	password.		authentication.
		• To use local authentication:	User either approach.

6.Configure the user privilege level through the AAA module.

a.Use the local-user command to create a local user and enter local user view.

b.Use the level keyword in the authorization-attribute command to configure the user privilege level.

•To use remote authentication (RADIUS, HWTACACS, or LDAP): Configure the user privilege level on the authentication server.

For local authentication, if you do not configure the user privilege level, the user privilege level is 0.

For remote authentication, if you do not configure the user privilege level, the user privilege level depends on the default configuration of the authentication server.

For more information about the local-user and authorization-attribute commands, see Access Control Command Reference.

For example:

# Configure the device to use local authentication for Telnet users on VTY 1.

<Sysname> system-view [Sysname] user-interface vty 1

[Sysname-ui-vty1] authentication-mode scheme

[Sysname-ui-vty1] quit [Sysname] local-user test [Sysname-luser-test] password simple 123

[Sysname-luser-test] service-type telnet

When users Telnet to the device through VTY 1, they must enter username test and password 123. After passing the authentication, the users can only use level-0 commands.

# Assign commands of levels 0 through 3 to the users.

[Sysname-luser-test] authorization-attribute level 3

Configuring the user privilege level directly on a user interface

To configure the user privilege level directly on a user interface that uses the scheme authentication mode:

Step		Command	Remarks
1.	Configure the authentication	For more information, see System	Required only for SSH users who
	type for SSH users as	Management and Maintenance
			use public-key authentication.
	publickey.	Configuration Guide.
2.	Enter system view.	system-view	N/A
3.	Enter user interface view.	user-interface { first-num1
		[ last-num1 ] vty first-num2	N/A
		[ last-num2 ] }
4.	Enable the scheme		By default, the authentication
		authentication-mode scheme	mode for VTY users is scheme, and
	authentication mode.		no authentication is needed for

console users.

134