15
Parameters
none
: Disables authentication.
password
: Performs local password authentication.
scheme
: Performs AAA authentication. For more information about AAA, see
Security Configuration
Guide.
Usage guidelines
When the authentication mode is
none
, any user can log in without authentication. To improve device
security, use the password or scheme authentication mode.
In VTY line view, this command is associated with the
protocol inbound
command. If you specify a
non-default value for only one of the two commands in VTY line view, the other command uses the default
setting, regardless of the setting in VTY line class view.
Examples
# Enable the
none
authentication mode for user line VTY 0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode none
# Enable password authentication for user line VTY 0 and set the password to
321
.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode password
[Sysname-line-vty0] set authentication password simple 321
# Enable scheme authentication for user line VTY 0, set the username to
123
and the password to
321
,
and authorize the Telnet service and network-admin user role to the user.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] authentication-mode scheme
[Sysname-line-vty0] quit
[Sysname] local-user 123
[Sysname-luser-manage-123] password simple 321
[Sysname-luser-manage-123] service-type telnet
[Sysname-luser-manage-123] authorization-attribute user-role network-admin
Related commands
set authentication password
auto-execute command
CAUTION:
After configuring this command for a user line, you might be unable to access the CLI through the user line.
Make sure you can access the CLI through a different user line before you configure this command and
save the configuration.
Use
auto-execute command
to specify a command that is automatically executed when a user logs in
through the current user line.
Use
undo auto-execute command
to remove the configuration.
