8
Step Command
Remarks
5.
Enable command
accounting.
command accounting
Optional.
By default, command accounting is
disabled, and the accounting server
does not record the commands
executed by users.
6.
Exit to system view.
quit
N/A
7.
Apply an AAA
authentication scheme to
the intended domain.
a.
Enter ISP domain view:
domain
domain-name
b.
Apply an AAA scheme to
the domain:
authentication default
{
hwtacacs-scheme
hwtacacs-scheme-name
[
local
] |
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] }
c.
Exit to system view:
quit
Optional.
By default, local authentication is
used.
For local authentication, configure
local user accounts.
For RADIUS or HWTACACS
authentication, configure the
RADIUS or HWTACACS scheme on
the device and configure
authentication settings (including the
username and password) on the
server.
For more information about AAA
configuration, see
Security
Configuration Guide
.
8.
Create a local user and
enter local user view.
local-user
user-name
N/A
9.
Set an authentication
password for the local user.
password
{
cipher
|
simple
}
password
N/A
10.
Specifies a command level
of the local user.
authorization-attribute level
level
Optional.
11.
Specify terminal service for
the local user.
service-type
terminal
N/A
12.
Configure common settings
for console login.
user interface settings (optional)
."
Optional.
The next time you attempt to log in through the console port, you must provide the configured login
username and password.
Configuring common console user interface settings (optional)
Some common settings configured for a console user interface take effect immediately and can interrupt
the console login session. To save you the trouble of repeated re-logins, use a login method different from
console login to log in to the device before you change console user interface settings.
After the configuration is complete, change the terminal settings on the configuration terminal and make
sure they are the same as the settings on the device.
To configure common settings for a console user interface: