H3C S5500-HI Switch Series, Руководство по базовой конфигурации

Страница: 44 / 180

33
To do… Use the command… Remarks
Enter the ISP
domain view
domain domain-name
Apply the
specified AAA
scheme to the
domain
authentication default
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ] }
Configure
the
authentica
tion mode
Exit to system view quit
Optional
By default, the AAA scheme is
local .
If you specify the local AAA scheme, you
need to perform local user configuration. If
you specify an existing scheme by providing
the
radius - scheme-name argument, perform
the following configuration as well:
•
For RADIUS and HWTACACS
configuration, see
Security Configuration
Guide .
•
Configure the username and password on
the AAA server. (For more information, see
Security Configuration Guide .)
Create a local user and enter
local user view
local-user user-name
Required
By default, no local user exists.
Set the authentication password
for the local user password { cipher |
simple } password
Required
Specifies the command level of
the local user authorization-attribute
level
level
Optional
By default, the command level is 0.
Specify the service type for the
local user
service-type terminal
Required
By default, no service type is specified.
Configure common settings for
console login
—
Optional
See “
Configuring common settings for
console login (optional) .”
After you enable command authorization or command accounting, you need to perform the following
configuration to make the function take effect:
• Create a HWTACACS scheme, and specify the IP address of the authorization server and other
authorization parameters.
•
Reference the created HWTACACS scheme in the ISP domain.
For more information, see Security Configuration Guide .
When users adopt the scheme mode to log in to the device, the level of the commands that the users can
access depends on the user privilege level defined in the AAA scheme.
•
When the AAA scheme is local, the user privilege level is defined by the authorization-attribute
level level command.
• When the AAA scheme is RADIUS or HWTACACS, the user privilege level is configured on the
RADIUS or HWTACACS server.
•
For more information about AAA, RADIUS, and HWTACACS, see Security Configuration Guide .
After the configuration, when you log in to the device through the console port, you are prompted to enter
a login username and password. A prompt such as <H3C> appears after you enter the password and
username and press
Enter , as shown in Figure 11 .