Step

 

Command

Remarks

5.

Configure the

For more information, see System

This task is required only for SSH users

 

authentication mode

who are required to provide their

 

Management and Maintenance

 

for SSH users as

usernames and passwords for

 

Configuration Guide.

 

password.

authentication.

 

 

 

 

 

 

 

 

• To use local authentication:

User either approach.

 

 

 

6.Configure the user privilege level through the AAA module.

a.Use the local-user command to create a local user and enter local user view.

b.Use the level keyword in the authorization-attribute command to configure the user privilege level.

•To use remote authentication (RADIUS, HWTACACS, or LDAP): Configure the user privilege level on the authentication server.

For local authentication, if you do not configure the user privilege level, the user privilege level is 0.

For remote authentication, if you do not configure the user privilege level, the user privilege level depends on the default configuration of the authentication server.

For more information about the local-user and authorization-attribute commands, see Access Control Command Reference.

For example:

# Configure the device to use local authentication for Telnet users on VTY 1.

<Sysname> system-view [Sysname] user-interface vty 1

[Sysname-ui-vty1] authentication-mode scheme

[Sysname-ui-vty1] quit [Sysname] local-user test [Sysname-luser-test] password simple 123

[Sysname-luser-test] service-type telnet

When users Telnet to the device through VTY 1, they must enter username test and password 123. After passing the authentication, the users can only use level-0 commands.

# Assign commands of levels 0 through 3 to the users.

[Sysname-luser-test] authorization-attribute level 3

Configuring the user privilege level directly on a user interface

To configure the user privilege level directly on a user interface that uses the scheme authentication mode:

Step

 

Command

Remarks

1.

Configure the authentication

For more information, see System

Required only for SSH users who

 

type for SSH users as

Management and Maintenance

 

use public-key authentication.

 

publickey.

Configuration Guide.

 

 

 

 

 

 

2.

Enter system view.

system-view

N/A

 

 

 

 

3.

Enter user interface view.

user-interface { first-num1

 

[ last-num1 ] vty first-num2

N/A

 

 

[ last-num2 ] }

 

 

 

 

 

4.

Enable the scheme

 

By default, the authentication

authentication-mode scheme

mode for VTY users is scheme, and

 

authentication mode.

no authentication is needed for

 

 

console users.

134