3Com Switch 8807, Configuration Manual

Page: 44 / 883

44 C
HAPTER
4: U
SER
I
NTERFACE
C
ONFIGURATION
Configuring the authentication method
The following command is used for configuring the user login authentication
method to deny the access of an unauthorized user.
Perform the following configuration in user interface view.
By default, terminal authentication is not required for local users log in via the
Console port. However, password authentication is required for local users and
remote Modem users to log in via the AUX port, and for Telnet users and the VTY
users to log in through Ethernet port.
n
If the Console port is configured for local password authentication, the user can
directly log in to the system even without a password configured; if other user
interfaces, such as the AUX port and VTY interface, are configured for local
password authentication, users cannot log in to the system without a password.
1 Perform local password authentication to the user interface
Using authentication-mode password command, you can perform local
password authentication. That is, you need use the command below to configure
a login password in order to login successfully.
Perform the following configuration in user interface view.
# Configure for password authentication when a user logs in through a VTY 0 user
interface and set the password to 3Com.
[SW8800] user-interface vty 0
[3Com-ui-vty0] authentication-mode password
[3Com-ui-vty0] set authentication password simple 3Com
2 Perform local or remote authentication of username and password to the user
interface
Using authentication-mode scheme [ command-authorization ] command,
you can perform local or remote authentication of username and password. The
type of the authentication depends on your configuration. For detailed
information, see "Security" section.
In the following example, local username and password authentication are
configured.
Table 19 Configure the authentication method
Operation Command
Configure the authentication method
authentication-mode { password | scheme
[ command-authorization ] | none }
Table 20 Configure the local authentication password
Operation Command
Configure the local authentication password
set authentication password { cipher |
simple } password
Remove the local authentication password undo set authentication password