5 User Management
Quidway NetEngine80
Configuration Guide - Basic Configurations
5-4
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Issue 04 (2009-12-20)
User Level
The system provides hierarchical management to HyperTerminal users and Telnet users.
The login user has the same 16 levels like the command. They are Visit, Monitoring,
Configure and Management, and are marked from 0 to15. The higher the mark is, the higher
the priority is.
A user can access a command depending on the user level.
z
In the case of non-authentication or password authentication, the level of the command
that can be accessed by the login user depends on the level of the login user interface.
z
In the case of AAA authentication, the level of the command that can be accessed by the
login user depends on the level of the local user in the AAA configuration.
The user can access the commands with the level equal to or smaller than the user level. For
example, if the user level is 2, the user can access the commands with level 0, 1, or 2. The
user with the level 3 can access all the commands.
For details of command level, refer to section 3.1.2 "Command Level" in Chapter 3 "Command Line
Introduction."
User Authentication
After the user configuration, the system authenticates users when they access the router.
The four types of user authentication are as follows:
z
Non-authentication: In this type, a user accesses the router without the username and
password. This is not recommended due to security reasons
z
Password authentication: In this type, a user accesses the router only with the password
rather than the username. This is safer when compared to non-authentication.
z
Authentication, Authorization and Accounting (AAA) local: This scheme needs both the
username and the password.
z
AAA authentication scheme: This scheme cooperates with AAA server, which
authenticates PPP users.
AAA local authentication authenticates the Telnet and HyperTerminal users.
User Planning
The network administrator provides the user plan based on the actual requirements.
z
At least one HyperTerminal user is created on a router
z
A Telnet user is created for remote access.
z
An FTP user uploads or downloads files on a router from the remote.
z
A PPP user can access networks through PPP connections.
