To do…

Use the command…

Remarks

Specify the service type for

 

Required

service-type terminal

By default, no service type is

the local user

 

specified.

 

 

 

 

 

Configure common settings

 

Optional

See “Configuring common settings

for VTY user interfaces

 

for VTY user interfaces (optional).”

 

 

 

 

 

After you enable command authorization, you need to perform the following configuration to make the function take effect:

Create a HWTACACS scheme, and specify the IP address of the authorization server and other authorization parameters. For more information, see the Security Configuration Guide.

Reference the created HWTACACS scheme in the ISP domain. For more information, see the Security Configuration Guide.

After you enable command accounting, you need to perform the following configuration to make the function take effect:

Create a HWTACACS scheme, and specify the IP address of the accounting server and other accounting parameters. For more information, see the Security Configuration Guide.

Reference the created HWTACACS scheme in the ISP domain. For more information, see the Security Configuration Guide.

When users adopt the scheme mode to log in to the device, the level of the commands that the users can access depends on the user privilege level defined in the AAA scheme.

When the AAA scheme is local, the user privilege level is defined by the authorization-attribute level level command.

When the AAA scheme is RADIUS or HWTACACS, the user privilege level is configured on the RADIUS or HWTACACS server.

For more information about AAA, RADIUS, and HWTACACS, see the Security Configuration Guide.

When you log in to the device through modems after the configuration, you are prompted to enter a login username and password. A prompt such as <HP> appears after you input the password and username and press Enter, as shown in Figure 26.

61