H3C S5120-EI Series, Руководство по эксплуатации

Страница: 914 / 1191

1-12
Follow these steps to configure the user privilege level under a user interface (SSH
publickey
authentication type):
To do… Use the command… Remarks
Configure the authentication
type for SSH users as
publickey
For the details, refer to
SSH2.0
Configuration
in the
Security
Volume
.
Required if users adopt the
SSH login mode, and only
username, instead of password
is needed at authentication.
After the configuration, the
authentication mode of the
corresponding user interface
must be set to
scheme
.
Enter system view
system-view
—
Enter user interface view
user-interface
[
type
]
first-number
[
last-number
]
—
Configure the authentication
mode when a user uses the
current user interface to log in
to the device
authentication-mode scheme
[
command-authorization
]
Optional
By default, the authentication
mode for VTY and AUX user
interfaces is
password
.
Configure the privilege level of
the user logging in from the
current user interface
user privilege level level
Optional
By default, the user privilege
level for users logging in from
the console user interface is 3,
and that for users logging from
the other user interfaces is 0.
Follow these steps to configure the user privilege level under a user interface (
none
or
password
authentication mode):
To do… Use the command… Remarks
Enter system view
system-view
—
Enter user interface view
user-interface
[
type
]
first-number
[
last-number
]
—
Configure the authentication
mode when a user uses the
current user interface to log in
to the device
authentication-mode
{
none
|
password
}
Optional
By default, the authentication
mode for VTY and AUX user
interfaces is
password
.
Configure the privilege level of
the user logging in from the
current user interface
user privilege level level
Optional
By default, the user privilege
level for users logging in from
the console user interface is 3,
and that for users logging from
the other user interfaces is 0.
4) Example of configuring user privilege level under a user interface
z
Perform no authentication to the users telnetting to the device, and specify the user privilege level
as 1. (This configuration brings potential security problem. Therefore, you are recommended to use
it only in a lab environment.)
<Sysname> system-view
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4] authentication-mode none