2-9
Console Port Login Configuration with Authentication Mode Being
Scheme
Configuration Procedure
Follow these steps to perform Console port login configuration (with authentication mode being
scheme
):
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter AUX user interface
view
user-interface aux
0
—
Configure to authenticate
users locally or remotely
authentication-mode
scheme
Required
The specified AAA scheme
determines whether to
authenticate users locally or
remotely.
By default, users logging in
through the Console port are not
authenticated
Quit to system view
quit
—
Enter the
default ISP
domain
view
domain
domain name
Specify the
AAA
scheme to
be applied
to the
domain
authentication default
{
hwtacacs- scheme
hwtacacs-scheme-name
[
local
] |
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] }
Configure
the
authentica
tion mode
Quit to
system
view
quit
Optional
By default, the local AAA scheme
is applied. If you specify to apply
the local AAA scheme, you need
to perform the configuration
concerning local user as well.
If you specify to apply an existing
scheme by providing the
radius
-
scheme-name
argument,
you need to perform the following
configuration as well:
z
Perform AAA-RADIUS
configuration on the switch.
(Refer to
AAA Configuration
in
the
Security Volume
for
details.)
z
Configure the user name and
password accordingly on the
AAA server. (Refer to the user
manual of AAA server.)
Create a local user
(Enter local user view.)
local-user
user-name
Required
No local user exists by default.
Set the authentication
password for the local
user
password
{
simple
|
cipher
}
password
Required
By default, a user is authorized
with no password
Specifies the level of the
local user
authorization-attribute level level
By default, no authorization
attribute is configured for a local
user
Specify the service type
for AUX users
service-type terminal
Required
By default, a user is authorized
with no service
