H3C SOHO IE4300, Command Reference Manual

Page: 59 / 3296

4
password
: Performs local password authentication.
scheme : Performs AAA authentication. For more information about AAA, see Security Configuration
Guide .
Usage guidelines
CAUTION:
•
When authentication is disabled, users can login without authentication. For security purpose,
disable authentication with caution.
•
When you enable password authentication, you must also configure an authentication password
for the line or line class. If no authentication password is configured, you cannot log in to the
device through the line or line class at the next time.
•
When you enable scheme authentication, make sure an authentication user account is available.
If no authentication user account is available, you cannot log in to the device through the line or
line class at the next time.
Only users assigned the network-admin, or level-15 user role can execute this command. Other
users cannot execute this command, even if they are granted the right to execute this command.
In VTY line view, this command is associated with the
protocol inbound
command.
•
If the settings of the two commands in VTY line view are both the default settings, the settings
for the commands in VTY line class view take effect.
•
If the settings of the two commands in VTY line view are both non-default settings, the
non-default settings in VTY line view take effect.
•
If only one command has a non-default setting in VTY line view, the other command uses the
default setting, regardless of the setting in VTY line class view.
An authentication mode change does not take effect for the current session. It takes effect for
subsequent login sessions.
Examples
# Enable the none authentication mode for VTY line 0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode none
# Enable password authentication for VTY line 0 and set the password to hello12345 .
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode password
[Sysname-line-vty0] set authentication password simple hello12345
# Enable scheme authentication for VTY line 0. Configure the local user 123 and set the password to
hello12345 . Assign the Telnet service and the user role network-admin to the user.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode scheme
[Sysname-line-vty0] quit
[Sysname] local-user 123
[Sysname-luser-manage-123] password simple hello12345
[Sysname-luser-manage-123] service-type telnet
[Sysname-luser-manage-123] authorization-attribute user-role network-admin