18
Default command level
3: Manage level
Parameters
none
: Performs no authentication. This keyword is not supported in FIPS mode.
password
: Performs local password authentication. This keyword is not supported in FIPS mode.
scheme
: Performs AAA authentication. For more information about AAA, see
Security Configuration
Guide.
Usage guidelines
For scheme authentication mode, if local authentication is used and password control is enabled, a user
must change the password after the first login (unless the user uses SSH for the first login). If NTP
synchronization is also configured, H3C recommends that you wait 10 minutes before changing the
password. Otherwise, NTP synchronization might not be finished when the password is created.
Examples
# Specify that no authentication is needed for VTY 0. (This mode is insecure.)
<Sysname> system-view
[Sysname] user-interface vty 0
[Sysname-ui-vty0] authentication-mode none
# Use password authentication when users log in to the device through VTY 0, and set the authentication
password to
321
.
<Sysname> system-view
[Sysname] user-interface vty 0
[Sysname-ui-vty0] authentication-mode password
[Sysname-ui-vty0] set authentication password simple 321
# Authenticate users by username and password for VTY 0. Set the username to
123
and the password
to
321
.
<Sysname> system-view
[Sysname] user-interface vty 0
[Sysname-ui-vty0] authentication-mode scheme
[Sysname-ui-vty0] quit
[Sysname] local-user 123
[Sysname-luser-123] password simple 321
[Sysname-luser-123] service-type telnet
[Sysname-luser-123] authorization-attribute level 3
Related commands
set authentication password
command accounting
Use
command accounting
to enable command accounting.
Use
undo command accounting
to restore the default.
Syntax
command accounting
undo command accounting
