Operation Manual – Login
H3C S3610&S5510 Series Ethernet Switches
Chapter 2 Logging in Through the Console Port
2-14
2.6 Console Port Login Configuration with Authentication
Mode Being Scheme
2.6.1 Configuration Procedure
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter the
default
ISP
domain
view
domain
Domain name
Specify
the AAA
scheme
to be
applied to
the
domain
authentication
default
{
hwtacacs-
scheme
hwtacacs-scheme-na
me
[
local
] |
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] }
Configu
re the
authenti
cation
mode
Quit to
system
view
quit
Optional
By default, the local AAA scheme is
applied. If you specify to apply the
local AAA scheme, you need to
perform the configuration
concerning local user as well.
If you specify to apply an existing
scheme by providing the
radius
-
scheme-name
argument,
you need to perform the following
configuration as well:
z
Perform AAA-RADIUS
configuration on the switch.
(Refer to the
AAA-RADIUS-HWTACACS
module for more.)
z
Configure the user name and
password accordingly on the
AAA server. (Refer to the user
manual of AAA server.)
Create a local user
(Enter local user
view.)
local-user
user-name
Required
No local user exists by default.
Set the
authentication
password for the
local user
password
{
simple
|
cipher
}
password
Required
Specify the service
type for AUX users
service-type
terminal
[
level
level
]
Required
Quit to system view
quit
—
Enter AUX user
interface view
user-interface aux
0
—
Configure to
authenticate users
locally or remotely
authentication-mode
scheme
[
command-
authorization
]
Required
The specified AAA scheme
determines whether to authenticate
users locally or remotely.
Users are authenticated locally by
default.
