Command Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510
Chapter 1 Login Commands
Huawei Technologies Proprietary
1-1
Chapter 1 Login Commands
1.1 Login Commands
1.1.1 authentication-mode
Syntax
authentication-mode
{
password
|
scheme
[
command-authorization
] |
none
}
View
User interface view
Parameter
password
: Authenticates users using the local password.
scheme
: Authenticates users locally or remotely using usernames and passwords.
command-authorization
: Performs command authorization on TACACS
authentication server.
none
: Does not authenticate users.
Description
Use the
authentication-mode
command to specify the authentication mode.
z
If you specify the
password
keyword to authenticate users using the local
password, remember to set the local password using the
set authentication
password
{
cipher
|
simple
}
password
command.
z
If you specify the
scheme
keyword to authenticate users locally or remotely using
usernames and passwords, the actual authentication mode, that is, local or
remote, depends on other related configuration.
z
If this command is executed with the
command-authorization
keywords
specified, authorization is performed on the TACACS server whenever you
attempt to execute a command, and the command can be executed only when you
pass the authorization. Normally, a TACACS server contains a list of the
commands available to different users.
If you specify to perform local authentication when a user logs in through the Console
port, a user can log into the switch with the password not configured. But for a VTY user
interface, a password is needed for a user to log into the switch through it under the
same circumstance.
By default, users logging in through the Console port are not authenticated, whereas
modem users and Telnet users are authenticated.
