Operation Manual – AAA-RADIUS-HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 AAA/RADIUS/HWTACACS
Configuration
1-20
1.3.7 Configuring Local User Attributes
For local authentication, you must create a local user and configure the attributes.
A local user represents a set of users configured on a device, which are uniquely
identified by the username. For a user requesting network service to pass local
authentication, you must add an entry as required in the local user database of the
device.
Follow these steps to configure the attributes for a local user:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Set the password display
mode for all local users
local-user
password-display-mode
{
auto
|
cipher-force
}
Optional
auto
by default
Add a local user and enter
local user view
local-user user-name
Required
No local user is
configured by default
Configure a password for
the local user
password
{
cipher
|
simple
}
password
Required
Place the local user to the
state of active or blocked
state
{
active
|
block
}
Optional
When created, a local
user is in the state of
active by default, and
the user can request
network services.
Specify the
service types
for the user
service-type
{
lan-access
|
{
ssh
|
telnet
|
terminal
} *
[
level level
] }
Required
No service is authorized
to a user by default
Specify
the
service
types for
the user
Authorize the
user to use the
FTP service
and specify a
directory for
the user to
access
service-type ftp
[
ftp-directory directory
]
Optional
By default, no service is
authorized to a user and
anonymous access to
FTP service is not
allowed. If you authorize
a user to use the FTP
service but do not
specify a directory that
the user can access, the
user can access the root
directory of the device
by default.
Set the directory
accessible to FTP/SFTP
users
work-directory
directory-name
Optional
By default, FTP/SFTP
users can access the
root directory.
