4
•
Because local authentication is the default authentication method for login users, you only need to
configure a local user on the switch.
•
To allow the local user to log in to the switch, authorize the local user to use the terminal service.
•
To allow the local user to use all commands, assign the user role network-admin to the local user.
The user role of a login user depends on the user role setting for the local user. It is
network-operator by default when local scheme authentication is used.
Software version used
This configuration example was created and verified on S12500-CMW710-R7129.
Configuration procedures
# Enable scheme authentication for the console user interface.
<Switch1> system-view
[Switch1] user-interface console 0
[Switch1-ui-console0] authentication-mode scheme
[Switch1-ui-console0] quit
# Configure a local user with the username
test
and password
test
.
[Switch1] local-user test class manage
[Switch1-luser-manage-test] password simple test
# Assign the user role network-admin and the terminal service to the user.
[Switch1-luser-manage-test] authorization-attribute user-role network-admin
[Switch1-luser-manage-test] service-type terminal
[Switch1-luser-manage-test] quit
Verifying the configuration
# Log in to the switch through the console port. Verify that the system displays a prompt for the console
login username and password.
******************************************************************************
* Copyright (c) 2004-2013 Hewlett-Packard Development Company, L.P. *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
User interface con0 is available.
Press ENTER to get started.
login: test
Password:
# Enter the correct username and password to verify that you can access the CLI.
<Switch1> system-view