Operation Manual – Login
H3C S5100-SI/EI Series Ethernet Switches
Chapter 2 Logging In Through the Console Port
2-12
To do…
Use the command…
Remarks
Enter the
default ISP
domain view
domain
d
omain-name
Specify the
AAA scheme
to be applied
to the
domain
scheme
{
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] |
hwtacacs-scheme
hwtacacs-scheme-name
[
local
] }
Configur
e the
authentic
ation
mode
Quit to
system view
quit
Optional
By default, the local AAA
scheme is applied.
If you specify to apply the
local AAA scheme, you
need to perform the
configuration concerning
local user as well.
If you specify to apply a
RADIUS or HWTACACS
scheme, you need to
perform the following
configuration as well:
z
Perform RADIUS and
HWTACACS
configuration on the
switch. (Refer to the AAA
part for more.)
z
Configure the user name
and password
accordingly on the AAA
server. (Refer to the user
manual of AAA server.)
Create a local user (Enter
local user view.)
local-user
user-name
Required
No local user exists by
default.
Set the authentication
password for the local
user
password
{
simple
|
cipher
}
password
Required
Specify the service type
for AUX users
service-type terminal
[
level
level
]
Required
Note that:
If you configure to authenticate the users in the scheme mode, the command level
available to users logging in to a switch depends on the command level specified in the
AAA scheme:
z
When the AAA scheme is local authentication, the command level available to
users depends on the
service-type terminal
[
level level
] command.
z
When the AAA scheme is RADIUS or HWTACACS authentication, you need to set
the corresponding user level on the RADIUS or HWTACACS server.
